Threat Database Trojans Trojan.MSIL.Injector.NEP


By CagedTech in Trojans

Threat Scorecard

Ranking: 2,659
Threat Level: 80 % (High)
Infected Computers: 19,633
First Seen: November 26, 2014
Last Seen: September 20, 2023
OS(es) Affected: Windows

Trojan.MSIL.Injector.NEP is distributed via spam emails. Also, Trojan.MSIL.Injector.NEP is part of the deployment kit used by CryptoWall ransomware. Trojan.MSIL.Injector.NEP may pretend to be harmless Microsoft Word document or a ZIP archive. This disguise is used to avoid detection and allows Trojan.MSIL.Injector.NEP to download CryptoWall on the victim's computer. Once in the system, CryptoWall ransomware will use the RSA-2048 encryption algorithm to lock access to video, document and image files. At this stage, CryptoWall instructs its victims to pay a ransom demand for retrieval of the files. Payment does not guarantee you a decryption key to decrypt your files. To avoid getting infected with Trojan.MSIL.Injector.NEP, it is recommended to not open spam emails or download suspicious files attached to them.

SpyHunter Detects & Remove Trojan.MSIL.Injector.NEP

File System Details

Trojan.MSIL.Injector.NEP may create the following file(s):
# File Name MD5 Detections
1. Diagx.exe 19492d5067392d2d2fe15ec161c7722a 1,040
2. Win Update.exe 803ab42b19ad1c20c69c7d76b8c3d5f4 495
3. Win Update.exe 90e92b970b7147815e3934eb26f03f4d 354
4. Win Update.exe 70f86c53b376a0d6a1de6ff6ed170d98 300
5. Win Update.exe fb4d77285a04c2180ae0f8f8b079ab43 282
6. Win Update.exe a9c9e89b8420e5bec1688a3608ad3f16 186
7. Win Update.exe 445a2777eec6d5dee4b7bb62f3278c7d 142
8. Win Update.exe a6db212107f8593a3cb36b7ae46f7841 99
9. cssrs.exe b9b10f1062e8b3d8b2e8555862891f9d 92
10. Win Update.exe e186ff48f06a636e6b230e9bd15f8afc 77
11. cssrs.exe 967d2a4b65a5966d91ce47c20e23bdb3 67
12. Win Update.exe 0aefcebc545505675a5f88fe66919e84 53
13. Win Update.exe 7f63ddfbd79cf30f7e057bade41d514a 49
14. d9016566f365b6c8d5cebc7313f7d4d5 46
15. Win Update.exe 950cd89253063f025348bfd021ff9245 45
16. Win Update.exe b158f1e0f52d209f07394056f9c318e3 41
17. Win Update.exe 9c1127ed9878b18e3684087161b0a09a 37
18. Win Update.exe 776faec371efebace00b3fa02dc0553a 34
19. Win Update.exe 711bcd968f99547d3105e216542b3dce 30
20. cssrs.exe 307bc0f3b4bf813fa8b0002445a0c95f 25
21. cssrs.exe 19c216f84dc2f1020d985b254c19aa31 19
22. cssrs.exe 411ef5e0cacfc3b2c0d8a22a61a3726a 12
23. cssrs.exe 2bd90cb5fadf6a1656634359c7517388 9
24. cssrs.exe 44fac7f43ad3d3d63540c420dc9df19c 4
25. fdPrhlpr.exe 198d703ff2b28dba58367b5434232144 0

Registry Details

Trojan.MSIL.Injector.NEP may create the following registry entry or registry entries:
Regexp file mask
%TEMP%\Win Update\Win Update.exe


Most Viewed