Home Malware Programs Trojans VirTool:MSIL/Injector.gen!A

VirTool:MSIL/Injector.gen!A

Posted: September 27, 2010

Threat Metric

Threat Level: 8/10
Infected PCs: 255
First Seen: November 30, 2010
OS(es) Affected: Windows

VirTool:MSIL/Injector.gen!A is a malicious Trojan horse that runs in the background and allows hackers remote access to the targeted system. VirTool:MSIL/Injector.gen!A attempts to propagate by exploiting local network shares. VirTool:MSIL/Injector.gen!A will also attempt to join a predefined IRC server to start denial-of-service (DDoS) attacks on the computer. The DDoS attacks will attempt to make the computer unavailable to its intended users. VirTool:MSIL/Injector.gen!A should be removed immediately using a reliable anti-spyware program.

Aliases

ILCrypt [AVG]Trojan.SuspectCRC [Ikarus]Win-Trojan/Xema.variant [AhnLab-V3]Mal/MsilInj-E [Sophos]Trojan.MSIL.Inject.ds [Kaspersky]Win32:Dropper-DOP [Trj] [Avast]Artemis!E04DC1BD2E55 [McAfee]PSW.ILSpy.C [AVG]MSIL/Stealer.GC!tr [Fortinet]Gen.Application.Heur [Ikarus]Trojan/Win32.HDC [AhnLab-V3]TR/PSW.Agent.kij [AntiVir]Tool.PassView.420 [DrWeb]Mal/MsilKlog-D [Sophos]HEUR:Trojan.Win32.Generic [Kaspersky]
More aliases (211)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%APPDATA%\Shell Extractor Services\Trace Update Services.exe File name: Trace Update Services.exe
Size: 480.25 KB (480256 bytes)
MD5: c86ad53c15bfa51b632e6a536cfb95a3
Detection count: 225
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Shell Extractor Services
Group: Malware file
Last Updated: December 1, 2010
%ALLUSERSPROFILE%\Start Menu\Programs\winlogon\svchost.exe File name: svchost.exe
Size: 869.89 KB (869897 bytes)
MD5: 9610d5023872abdb64481c60dc744239
Detection count: 80
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\Start Menu\Programs\winlogon
Group: Malware file
Last Updated: December 7, 2010
%PROGRAMFILES%\Winlogon\svhost.exe File name: svhost.exe
Size: 868.87 KB (868873 bytes)
MD5: f9efe921b021ed5d73a53e9273cf3aa1
Detection count: 72
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Winlogon
Group: Malware file
Last Updated: December 7, 2010
C:\Adobe\PDFViewer.exe File name: PDFViewer.exe
Size: 440.32 KB (440320 bytes)
MD5: c5054d07a3ba2739290ed30b90c1cc51
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: C:\Adobe
Group: Malware file
Last Updated: April 18, 2011
%PROGRAMFILES%\Microsoft\WindowsUpdate.exe File name: WindowsUpdate.exe
Size: 875.52 KB (875529 bytes)
MD5: 17e27273b6f7ca1aaa98bd687f3367fc
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Microsoft
Group: Malware file
Last Updated: December 7, 2010
Loading...