Malware

MSIL/Agent.BDH malicious file

Malware Removal

The MSIL/Agent.BDH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Agent.BDH virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Anomalous binary characteristics

How to determine MSIL/Agent.BDH?


File Info:

crc32: B4C3DD2B
md5: e4aae4783383f135dab68b03a6aab5cc
name: E4AAE4783383F135DAB68B03A6AAB5CC.mlw
sha1: 7ff0fca5b7af893a851841a1fa1efb3a20f6f91e
sha256: d940baa831b90bd70f7f85d20141545498dc5baecb7a83f12fae0f61c850c7f7
sha512: 1642718e4889aad72d15672e73836243136574240826e592111da69a9321eaa7c6b84a4de5413251ec45d14da441465b39f07e128d9b37307d10c01ff8f21da1
ssdeep: 192:sdvXmYkyTs1IjVHWCMwcHb7LRoIfdyP14waVWTjcGOaHpBrSPgWoG:s4YxPFMwcvLRoSUt9aJGOjIWo
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Microsoft 2011
Assembly Version: 1.0.0.0
InternalName: java.exe
FileVersion: 1.0.0.0
CompanyName: Microsoft
ProductName: java
ProductVersion: 1.0.0.0
FileDescription: java
OriginalFilename: java.exe

MSIL/Agent.BDH also known as:

K7AntiVirusTrojan ( 00517bc51 )
DrWebTrojan.DownLoader25.46986
CynetMalicious (score: 85)
ALYacGen:Heur.MSIL.Krypt.2
CylanceUnsafe
ZillyaTrojan.Blocker.Win32.38995
SangforTrojan.Win32.Save.a
AlibabaRansom:Win32/Blocker.dd810063
K7GWTrojan ( 00517bc51 )
Cybereasonmalicious.83383f
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of MSIL/Agent.BDH
AvastWin32:Malware-gen
KasperskyTrojan-Ransom.Win32.Blocker.kjby
BitDefenderGen:Heur.MSIL.Krypt.2
NANO-AntivirusTrojan.Win32.Blocker.etusvp
MicroWorld-eScanGen:Heur.MSIL.Krypt.2
TencentWin32.Trojan.Blocker.Akow
Ad-AwareGen:Heur.MSIL.Krypt.2
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZemsilF.34608.am0@aeGfJCm
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.mg.e4aae4783383f135
EmsisoftGen:Heur.MSIL.Krypt.2 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/ATRAPS.Gen
eGambitUnsafe.AI_Score_99%
MicrosoftBackdoor:Win32/Bladabindi!ml
ArcabitTrojan.MSIL.Krypt.2
AegisLabTrojan.Win32.Blocker.4!c
ZoneAlarmTrojan-Ransom.Win32.Blocker.kjby
GDataGen:Heur.MSIL.Krypt.2
McAfeeArtemis!E4AAE4783383
MAXmalware (ai score=99)
VBA32Trojan.MSIL.gen.a.13
PandaTrj/GdSda.A
RisingRansom.Blocker!8.12A (CLOUD)
IkarusTrojan.MSIL.Agent
FortinetMSIL/Agent.BDH!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Blocker.HgIASOcA

How to remove MSIL/Agent.BDH?

MSIL/Agent.BDH removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment