I get a Trojan.MSIL Virus when I visit Internet. My PC is much slower than before, I try to remove it by my MSE, but my anti-virus says that this Trojan needs to be removed manually. I know nothing about the computer. How can I do that? Any help will appreciate.

Description on Trojan.MSIL Virus

Trojan.MSIL Virus is a dangeruos virus, which can terminate program running on the infected computer. This nasty Trojan is extremely difficult to remove via a normal anti-virus. It invades into the computer system via malicious websites, E-mail attachment and the infected program. Once it is installed to the victim’s PC, the infected machine will be in a low performance, it crashes frequently and gets the blue death screen. It can infect Windows XP, Vista, 7 and 8, the Trojan can do anything it can to damage the infected PC. So it needs to be removed completely before it causes further damage on the infected PC.

In general, when this virus starts its working, some of the victims may get blue death screen when they want to run some programs and their PCs will run much slowly. This Trojan can even download other viruses like browser hijack redirect and malware at the same time, that is why there will be different viruses on the same PC. If you just let this virus stay in the infected PC, your PC will be in a unsafe situation and high-risk of being attacked. The desktop image and homepage can be replaced by the virus maker, since the anti-virus may not able to remove this virus, it is suggested that you should remove this virus manually.

Some Obvious Symptoms of Infection with Trojan Virus

1. Your antivirus software keeps sending the infection message.
2. Your computer runs slowly or gets stuck abnormally.
3. Unauthorized remote connection occurs.
5. Internet speed is like a snail;
6. Questionable pop-ups telling you that your computer is in danger and needs a scanner or other program you’ve never heard of.
7. Booting or rebooting before login tend to have problems and etc.

Manually Remove Trojan.MSIL Virus

Up till now, there is not a perfect antivirus that can detect this pesky Trojan virus or delete it completely. It has been updated by remote and backstage cyber criminals to escape from the scan of any anti-virus programs thus it is hard to be removed or even found. The most effective way is to remove it manually. The following instructions need quite level of computer expertise. If you don’t know how to that correctly, please contact with YooCare online support now!

Please follow these steps to get rid of this Trojan virus manually:

Step A: Press CTRL+ALT+DEL or CTRL+SHIFT+ESC(this operation varies by different operating systems). Open the Windows Task Manager.
If that didn’t work, try another way by pressing the Start button and click on the Run option. This will start the Run tool. Type taskmgr in the box and press OK. This is going to start the Windows Task Manager for you.

Step B: In the window of Task Manager, click on Processes tab. Find the process by the name of random.exe. Then scroll the list to find required processes. Select it with your mouse or arrow keys on the keyboard and click on End Process button. The process will be killed in this way.

Step C: Go to Folder Options from Control Panel. Under View tab, select Show hidden files and folders and uncheck Hide protected operating system files (Recommended), and then click OK. Remember to back up essential files beforehand.

Step D: Press Windows+ R keys and type regedit in Run window. Delete associated files and registry entries related to the virus as follows(The entries may differ from different computers but they are all named randomly as a common character):

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “CertificateRevocation” = ’0′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = ’0′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop “NoChangingWallPaper” = ’1′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = ‘/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = ’1′

Step E: Reboot the computer normally to take effective when the above steps are done.

This Video Shows You How to Safely Modify Windows Registry Editor:


Trojan.MSIL Virus must be removed when it appears on your PC. Not only can it mess up your system files but also create system bugs on your PC. Even the registry can be modified by this nasty virus. This virus can hide its name and position so that it can not be erased by the security programs like anti-virus program or firewall. It may keep coming back when you restart the infected PC if you just try to kill it by anti-virus. That is the reason it can be one of the most dangerous viruses on the Internet. All in all, what you need to do is to remove this virus as fast as you can, the virus maker may invade your PC to steal your information and data easily. Do not hesitate, just get rid of it now.
Kindly Reminder: If you fail to remove the stubborn Trojan virus with the methods you find from the internet, please consult YooSecurity certified professionals to remove it completely. For all the above operations need computer expertise and any wrong operation may lead to damage of your vulnerable computer system.

Published by Tony Shepherd & last updated on July 28, 2013 5:47 am

Leave a Reply