MSIL/Agent.CLC removal tips

The MSIL/Agent.CLC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Agent.CLC virus can do?

Network activity detected but not expressed in API logs

How to determine MSIL/Agent.CLC?


File Info:
crc32: B2C7D827
md5: 3e23ff832ac3e0cfc1f1d1f095eee9c7
name: vch.exe
sha1: ff4ac371a577b3f1bdb55248ad43bfada3f80449
sha256: 00122f3b496c55c2874e09e0e7e7d71eb8118269394d7bb54338873a2616be6b
sha512: 9d01e441f5169d3ec964924cdf9cc14e06960891881ab16bd8919a5a47be87c04083573e9f96099e68ff5776e3258c4dc2e77248d4c7905cf94bcdb9e36cf4d0
ssdeep: 24576:ZjARUokwfsYNcfmm7i/59rFeMd4oQqht+ExyLqco0lVY:ZjmsYNcfmm7ibyRqhVyLC0lVY
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Intel 2020
Assembly Version: 9.9.7.3
InternalName: igfxtsk.exe
FileVersion: 5.3.7.3
CompanyName: Intel Graphics Modules
LegalTrademarks: Copyright xa9 Microsoft 2020
Comments: Intel Graphics
ProductName: Intel Graphics Installer
ProductVersion: 5.3.7.3
FileDescription: Intel Graphics Modules
OriginalFilename: igfxtsk.exe

MSIL/Agent.CLC also known as:

MicroWorld-eScan	Gen:Variant.Ursu.730836
FireEye	Gen:Variant.Ursu.730836
Sangfor	Malware
BitDefender	Gen:Variant.Ursu.730836
ClamAV	Win.Malware.Crimson-7443187-0
GData	Gen:Variant.Ursu.730836
Kaspersky	HEUR:Trojan-Ransom.MSIL.Foreign.gen
Emsisoft	Gen:Variant.Ursu.730836 (B)
MAX	malware (ai score=84)
Arcabit	Trojan.Ursu.DB26D4
ZoneAlarm	HEUR:Trojan-Ransom.MSIL.Foreign.gen
ALYac	Gen:Variant.Ursu.730836
Ad-Aware	Gen:Variant.Ursu.730836
ESET-NOD32	a variant of MSIL/Agent.CLC
SentinelOne	DFI – Malicious PE
BitDefenderTheta	Gen:NN.ZemsilF.34084.sn0@auD3gGc

How to remove MSIL/Agent.CLC?

MSIL/Agent.CLC removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X