Categories: Malware

VirTool:MSIL/Injector.IQ removal tips

The VirTool:MSIL/Injector.IQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VirTool:MSIL/Injector.IQ virus can do?

Presents an Authenticode digital signature
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous .NET characteristics
The executable used a known stolen/malicious Authenticode signature

How to determine VirTool:MSIL/Injector.IQ?


File Info:
name: 477F9071A2494106F3BA.mlwpath: /opt/CAPEv2/storage/binaries/30f309b4912eea977732ec38083cf4e363ff4f757df1b2a5170d9033fa831655crc32: 0F51409Emd5: 477f9071a2494106f3bab9d866bf491esha1: 5bdbec0b011c60945154742de74c75cf11a6e8c7sha256: 30f309b4912eea977732ec38083cf4e363ff4f757df1b2a5170d9033fa831655sha512: d1efe71ff34b986b72e4ca13210a019efe12fb6f08728a56350ce7ce5dcab566035db26429e104f2524dfe4774e77b4845863f3350971fc79ddae69b062e74f3ssdeep: 49152:5n2CWZeY24D4n8pKd7IXuZzKRQ54ZxrC/ccha5FzGNUbWkt9:J2CWZess8pAsu8y5qxrmhaTvbWu9type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1A7A53383EEB41056FC1F00F60A8AD74D7BFE5B1F4E412B75A19F728620A57B51BA3068sha3_384: a820338d615de889ee8378c009821995f073329ea0774d1301aa1705592cecc21d056956ecaa1903e193afa3a166a66eep_bytes: ff250020400000000000000000000000timestamp: 2016-01-08 01:24:08
Version Info:
0: [No Data]

VirTool:MSIL/Injector.IQ also known as:

Lionic	Trojan.Win32.Generic.mfYH
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ursu.679016
FireEye	Generic.mg.477f9071a2494106
ALYac	Gen:Variant.Ursu.679016
Cylance	Unsafe
Zillya	Trojan.Zbot.Win32.193337
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 00587d571 )
Alibaba	Trojan:MSIL/Injector.47d481e9
K7GW	Trojan ( 00587d571 )
Cybereason	malicious.1a2494
BitDefenderTheta	Gen:NN.ZemsilF.34212.aoX@ai8ZQ5b
VirIT	Trojan.Win32.Atros2.CEAE
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.EUS
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.MSIL.NanoBot.gen
BitDefender	Gen:Variant.Ursu.679016
NANO-Antivirus	Trojan.Win32.AD.dzrebk
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.114c3cc5
Ad-Aware	Gen:Variant.Ursu.679016
Sophos	Mal/Generic-S
Comodo	Malware@#3bgu85qus2om7
F-Secure	Trojan.TR/Dropper.MSIL.Gen
DrWeb	Trojan.PWS.Siggen1.45818
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TSPY_ZBOT.YUYAMV
McAfee-GW-Edition	BehavesLike.Win32.Generic.vc
Emsisoft	Gen:Variant.Ursu.679016 (B)
Ikarus	Trojan.MSIL.Injector
GData	Gen:Variant.Ursu.679016
Jiangmin	Trojan.PSW.Fareit.azk
MaxSecure	Trojan.Malware.300983.susgen
Avira	TR/Dropper.MSIL.Gen
Antiy-AVL	Trojan[Spy]/Win32.Zbot
Kingsoft	Win32.Troj.Zbot.wg.(kcloud)
Arcabit	Trojan.Ursu.DA5C68
ZoneAlarm	HEUR:Trojan.MSIL.NanoBot.gen
Microsoft	VirTool:MSIL/Injector.IQ
AhnLab-V3	Trojan/Win32.MDA.R173934
McAfee	GenericRXMR-UJ!477F9071A249
MAX	malware (ai score=100)
Malwarebytes	MachineLearning/Anomalous.100%
TrendMicro-HouseCall	TSPY_ZBOT.YUYAMV
Yandex	Trojan.PWS.Fareit!OSOwPBHVLy0
SentinelOne	Static AI – Malicious PE
eGambit	Generic.Malware
Fortinet	MSIL/Kryptik.ETQ!tr
Webroot	W32.InfoStealer.Zeus
AVG	Win32:Malware-gen
Panda	Trj/Agent.LDG
CrowdStrike	win/malicious_confidence_100% (D)