Should I remove “MSIL/Agent.DHI”?

The MSIL/Agent.DHI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Agent.DHI virus can do?

The binary likely contains encrypted or compressed data.

How to determine MSIL/Agent.DHI?


File Info:
crc32: 9C0E25FA
md5: 0ae8fb7b175fa910cf1d56c8b9cccdcc
name: 0AE8FB7B175FA910CF1D56C8B9CCCDCC.mlw
sha1: e17a48421e511420af624958eb82479ead09df31
sha256: 713829dca82058a1574cf961347b223d79e093adcaf7aafc21785acf60b948bf
sha512: d8ccf2d29478e50670eb934a063af4b9cb37c60f0ff7b2931b99ea311111558c0d47a0f068bd02242fc9eaa0ee0d2d03babdc0675749b9a60d68877c32669ff4
ssdeep: 12288:1bVBL6hD2x/HAWbR2zS4sikO1A83u2BSDoCqKcOv3r/uHkNrX:pVx6uHAW92zt/kWu2BSMCqDQrmH
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: DriverAPI
Assembly Version: 0.6.4.0
InternalName: Stub.exe
FileVersion: 0.6.4.0
CompanyName: DriverAPI
LegalTrademarks: DriverAPI
Comments: DriverAPI
ProductName: DriverAPI
ProductVersion: 0.6.4.0
FileDescription: DriverAPI
OriginalFilename: Stub.exe

MSIL/Agent.DHI also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:MSIL/MalwareX.3a285fe1
K7GW	Trojan ( 005797941 )
Cybereason	malicious.21e511
ESET-NOD32	a variant of MSIL/Agent.DHI
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
Kaspersky	UDS:Trojan.Multi.GenericML.xnet
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34628.Qm0@auZR7G
TrendMicro	TROJ_GEN.R002C0PCM21
McAfee-GW-Edition	BehavesLike.Win32.Fareit.jc
FireEye	Generic.mg.0ae8fb7b175fa910
Avira	TR/Dropper.MSIL.Gen
eGambit	Unsafe.AI_Score_99%
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/AgentTesla!ml
AegisLab	Trojan.Multi.GenericML.4!c
GData	Win32.Trojan.Agent.XH4KII
McAfee	GenericRXNU-AN!0AE8FB7B175F
VBA32	CIL.HeapOverride.Heur
Malwarebytes	MachineLearning/Anomalous.93%
TrendMicro-HouseCall	TROJ_GEN.R002C0PCM21
Ikarus	Win32.Outbreak
Fortinet	MSIL/Agent.DHI!tr
AVG	Win32:MalwareX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/TrojanDropper.Generic.HwMAFVsA

How to remove MSIL/Agent.DHI?

MSIL/Agent.DHI removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X