Malware

MSIL/Agent.BVF (file analysis)

Malware Removal

The MSIL/Agent.BVF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/Agent.BVF virus can do?

  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine MSIL/Agent.BVF?


File Info:

crc32: 0EA98061
md5: d5172d696fe22072dd06034531068a88
name: D5172D696FE22072DD06034531068A88.mlw
sha1: f97fecfd97f9bc95333e1d9b173e7ec5354c634c
sha256: d71cd578b981e5777e2745c6e3f436173358e5ce97d2c0ef27ed34d330cb08c9
sha512: d91541c1272b3c54d1a45dd299ac8a19e849786eacf4c81259e22f927779b23f135bfe1cd7256fd57242ee44f515a88db5a671fa5734981d3d0c7b4018f22ca2
ssdeep: 3072:E4aeQ7XgXTtuSrtdIeIst/ebouOvWi3OvdHDE:9MXgXTMSrt+eIst/ebdOvW7d
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2019
Assembly Version: 1.0.0.0
InternalName: Stub.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName:
ProductVersion: 1.0.0.0
FileDescription:
OriginalFilename: Stub.exe

MSIL/Agent.BVF also known as:

K7AntiVirusTrojan ( 0054790f1 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
ClamAVWin.Malware.Razy-9790647-0
ALYacIL:Trojan.MSILZilla.2050
CylanceUnsafe
ZillyaTrojan.Agent.Win32.1167706
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderIL:Trojan.MSILZilla.2050
K7GWTrojan ( 0054790f1 )
Cybereasonmalicious.96fe22
BitDefenderThetaGen:NN.ZemsilF.34266.hm0@aSiLSf
CyrenW32/MSIL_Troj.QH.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Agent.BVF
ZonerTrojan.Win32.81240
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
AlibabaTrojan:MSIL/AntiWD.90680e6b
NANO-AntivirusTrojan.Win32.Stealer.fshfld
MicroWorld-eScanIL:Trojan.MSILZilla.2050
TencentWin32.Trojan.Generic.Wopj
Ad-AwareIL:Trojan.MSILZilla.2050
SophosMal/Generic-S
ComodoMalware@#kcf2pbxugpxy
DrWebTrojan.PWS.Stealer.26403
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionPWS-FCQR!D5172D696FE2
FireEyeGeneric.mg.d5172d696fe22072
EmsisoftIL:Trojan.MSILZilla.2050 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.dmama
AviraTR/Dropper.Gen
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.2BF980E
MicrosoftBackdoor:MSIL/AsyncRAT.GG!MTB
GDataMSIL.Backdoor.DCRat.D
AhnLab-V3Trojan/Win32.AsyncRAT.R327797
McAfeePWS-FCQR!D5172D696FE2
MAXmalware (ai score=100)
VBA32TScope.Trojan.MSIL
MalwarebytesBackdoor.AsyncRAT.Generic
TrendMicro-HouseCallTROJ_FRS.0NA103HV20
RisingTrojan.AntiVM!1.CF63 (CLASSIC)
YandexTrojan.Agent!QNzjP+pbV+0
IkarusTrojan.MSIL.Agent
FortinetMSIL/CoinMiner.CFQ!tr
PandaTrj/CI.A

How to remove MSIL/Agent.BVF?

MSIL/Agent.BVF removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment