MSIL/Agent.BTN removal instruction

The MSIL/Agent.BTN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Agent.BTN virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/Agent.BTN?


File Info:
crc32: 234C75A9
md5: 7f16a8e87292485a64dbbb131881d2fc
name: 7F16A8E87292485A64DBBB131881D2FC.mlw
sha1: a68fd5730713996484971cfce6433e8aaa413023
sha256: 1ea24ac25648543046c5319984892c004327b22174dccfc5ef9a0d357588cf44
sha512: 18c4daa4f944d33e520973975425b6c84aa6345e5345292d0d07ba8f5f503d642c9694280ff9621f55308b65d31e5102fe20dd6785fa7350490b8b70939d147e
ssdeep: 384:OL9dmrXSCb9a69Ox/9b5F/TX2/VMddF4rqs8/Z2N5hFGtiLgx4r3y3D1rLaTPd5:E9dmrifNtPTjF4mh65LgvFN4Cgy
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 0.0.0.0
InternalName: XWorm.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:  
OriginalFilename: XWorm.exe

MSIL/Agent.BTN also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	IL:Trojan.MSILZilla.5989
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (D)
Cybereason	malicious.307139
Cyren	W32/MSIL_Agent.CDE.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Agent.BTN
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
Kaspersky	HEUR:Trojan-Ransom.MSIL.Blocker.gen
BitDefender	IL:Trojan.MSILZilla.5989
MicroWorld-eScan	IL:Trojan.MSILZilla.5989
Ad-Aware	IL:Trojan.MSILZilla.5989
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34266.cm0@a8Zphbb
McAfee-GW-Edition	BehavesLike.Win32.Trojan.nm
FireEye	Generic.mg.7f16a8e87292485a
Emsisoft	IL:Trojan.MSILZilla.5989 (B)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_100%
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	IL:Trojan.MSILZilla.D1765
GData	IL:Trojan.MSILZilla.5989
McAfee	GenericRXKM-HM!7F16A8E87292
MAX	malware (ai score=84)
VBA32	Malware-Cryptor.MSIL.AgentTesla.Heur
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.BTN!tr
AVG	Win32:MalwareX-gen [Trj]

How to remove MSIL/Agent.BTN?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

MSIL/Agent.BTN removal instruction