What is “MSIL/Agent.DOK”?

The MSIL/Agent.DOK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Agent.DOK virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine MSIL/Agent.DOK?


File Info:
crc32: C6C2DD95
md5: ae20da9a88c7624a6b3f81a20bc8065c
name: AE20DA9A88C7624A6B3F81A20BC8065C.mlw
sha1: 34d3412727fa1053661e0b17632eba3c160e77bc
sha256: 124023c0cf0524a73dabd6e5bb3f7d61d42dfd3867d699c59770846aae1231ce
sha512: dd79ba6b1a60e843b2e557f0a7767b4dca48fc07aa06d9a47366fac09e5aa35a589e0f704354c15a90e681b9a851b519aa193cc902906bad091e1f8330e0eaad
ssdeep: 1536:SKsxt6D6SRRSBOksZHaSLs/UdikOK0U9fEzt:SKsxt6D6SrSuZHaSLs/UdikOK0U9mt
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: IntelWifi.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: IntelWifi
ProductVersion: 1.0.0.0
FileDescription: IntelWifi
OriginalFilename: IntelWifi.exe

MSIL/Agent.DOK also known as:

DrWeb	BackDoor.SiggenNET.23
CrowdStrike	win/malicious_confidence_60% (W)
K7GW	Trojan ( 005823401 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	MSIL/Agent.DOK
APEX	Malicious
Avast	FileRepMalware
BitDefender	Trojan.GenericKD.37567751
MicroWorld-eScan	Trojan.GenericKD.37567751
Ad-Aware	Trojan.GenericKD.37567751
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.ae20da9a88c7624a
Emsisoft	Trojan.GenericKD.37567751 (B)
SentinelOne	Static AI – Malicious PE
GData	Trojan.GenericKD.37567751
McAfee	RDN/Generic
MAX	malware (ai score=83)
Rising	Backdoor.Agent/MSIL!1.D8C5 (CLASSIC)
Ikarus	Trojan.MSIL.Agent
Fortinet	MSIL/Agent.DOK!tr
AVG	FileRepMalware

How to remove MSIL/Agent.DOK?

MSIL/Agent.DOK removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X