MSIL/Injector.EJD!tr

Analysis

MSIL/Injector.EJD!tr is a generic detection for a trojan. Since this is a generic detection, files that are detected as MSIL/Injector.EJD!tr may have varying behavior.
Below are examples of some of these behavior:

• Creates an autorun mechanism by copying itself to the Startup folder.


• Network activities are observed to perform DNS queries on the following sites:
  
  • bot.{Removed}ddress.com
  • smtp.ben{Removed}in

Recommended Action

• Make sure that your FortiGate/FortiClient system is using the latest AV database.
• Quarantine/delete files that are detected and replace infected files with clean backup copies.