How to remove “AdWare.MSIL.Agent”?

The AdWare.MSIL.Agent is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What AdWare.MSIL.Agent virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine AdWare.MSIL.Agent?


File Info:
crc32: 7BF2903C
md5: a31b3d71b50d0bec9854f66724a70b1b
name: A31B3D71B50D0BEC9854F66724A70B1B.mlw
sha1: 50483290b9acc5e9fe91ca8a26874a5ebf9ce30b
sha256: 2156d58226da84b6e96682b2fc450e24dca307831b93e75d07e70bf5f023fd8b
sha512: 76d931d832f6bb2874afed5142f0e1d7c8ab91de9a0ffdb75d97dd02c1a1cc34b08ae935c7398389efc3101f942afb44f9fec3455fab7726dd267b4093ef8495
ssdeep: 24576:gkNFZqeKj8NFZqe568aCBJ8wI+Mu/sg59QoGSs/xJZb:5PZqe08PZqex8w9ZGd
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright CC xa92018 .
Assembly Version: 1.5.1.7
InternalName: myzeveel.exe
FileVersion: 1.5.1.7
CompanyName: pronto ltd
LegalTrademarks: pronto
Comments: pronto
ProductName: pronto Client                                       
ProductVersion: 1.5.1.7
FileDescription: pronto
OriginalFilename: myzeveel.exe

AdWare.MSIL.Agent also known as:

K7AntiVirus	Adware ( 005465501 )
Lionic	Riskware.Win32.Generic.1!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen7.46703
ALYac	Gen:Variant.Ursu.170631
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Adware ( 005465501 )
Cybereason	malicious.1b50d0
Cyren	W32/MSIL_Kryptik.AB.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Adware.CloudGuard.D
APEX	Malicious
Avast	Win32:AdwareX-gen [Adw]
Kaspersky	not-a-virus:HEUR:AdWare.MSIL.Agent.gen
BitDefender	Gen:Variant.Ursu.170631
NANO-Antivirus	Trojan.Win32.CloudGuard.fajmdl
MicroWorld-eScan	Gen:Variant.Ursu.170631
Tencent	Msil.Adware.Cloudguard.Lizz
Ad-Aware	Gen:Variant.Ursu.170631
Sophos	CloudGuard (PUA)
Comodo	ApplicUnwnt@#340r9n7ocefl3
BitDefenderTheta	Gen:NN.ZemsilF.34294.un0@ae8F48o
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.th
FireEye	Generic.mg.a31b3d71b50d0bec
Emsisoft	Gen:Variant.Ursu.170631 (B)
SentinelOne	Static AI – Malicious PE
Avira	ADWARE/CloudGuard.Gen
Microsoft	Trojan:Win32/Wacatac.A!ml
GData	Gen:Variant.Ursu.170631
AhnLab-V3	PUP/Win32.CloudGuard.R222514
McAfee	PUP-XEQ-QX
MAX	malware (ai score=99)
Malwarebytes	Adware.CloudGuard.TskLnk
Panda	Trj/GdSda.A
Ikarus	AdWare.MSIL.Cloudguard
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Adware/CloudGuard
AVG	Win32:AdwareX-gen [Adw]
Paloalto	generic.ml

How to remove AdWare.MSIL.Agent?

AdWare.MSIL.Agent removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X