VirTool:MSIL/Injector.gen!W

VirTool:MSIL/Injector.gen!W is a malicious Virus which enters the system without the user’s say so, and will conduct all of its activity in the system’s background. This threat was first released on 15 October, 2010, and has gone on to infect many PCs across the globe. Many legitimate security companies cite VirTool:MSIL/Injector.gen!W as a severe threat which needs to be removed as soon as possible.

VirTool:MSIL/Injector.gen!W also operates under various aliases across the web, the most popular of them being the following:

Trojan-Dropper.MSIL.StubRC.cgc
W32/Suspicious_Gen2.AZKEX
Trojan.DR.Dunik.CPB
Trojan horse Dropper.Small.CLX
Win32.HLLW.Autoruner.25074
Trojan-Dropper.MSIL
Mal/EncPk-SU
Trojan.Win32.Generic.pak!cobra

This threat acts as an injector written using MSIL, which is the Microsoft Intermediate Language, that inject code into running processes. The malware hides itself by inject itself into running processes, thus making VirTool:MSIL/Injector.gen!W harder to detect and remove.

There are no common symptoms associated with a VirTool:MSIL/Injector.gen!W infection, and the only notifications the user will get as to the presence of VirTool:MSIL/Injector.gen!W will come from notifications from installed security software on the system.

The way VirTool:MSIL/Injector.gen!W works is that a malicious file is generally encrypted or compressed and stored inside another application, which decodes the malicious file and executes it. The malicious application may be injected into a clean process, or loaded in a new process altogether. Unlike with a Trojan dropper, the malicious executable is never written to disk as a separate file.

Malicious applications detected as VirTool:MSIL/Injector.gen!W can have any purpose, as this technique is utilized by various different malware families in order to protect them from detection and removal.

Users who value the safety, privacy and security of their systems are urged to destroy VirTool:MSIL/Injector.gen!W immediately. The safest and easiest way to go about doing this is to employ the removal power of a genuine security tool which will not only erase VirTool:MSIL/Injector.gen!W, but also protect the system against similar attacks in future.