How to remove “MSIL/Agent.DPU”?

The MSIL/Agent.DPU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Agent.DPU virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine MSIL/Agent.DPU?


File Info:
crc32: 25D27DF5
md5: 54c103ff648b593560d4bc88372b7847
name: 54C103FF648B593560D4BC88372B7847.mlw
sha1: 7616cabeb66335894100d85642b4605a9676caf1
sha256: b7e384be528732a4552779e4cc075e2882a135f861c5fd8b000d5aef50c4a6d7
sha512: e8ad335f938b8505e4e8e8f664275b0f100898eaca015b59854015b8d76f9df67963d345cbb334973be48cd6ee500f1bb396e123cb285e3b8d36406c243b5316
ssdeep: 96:HKAFGPSpMpzKepVW3KrrOXZ8alEofVtH7Pkj7Zor0MKhQua7G0a:qyGPrzKGVW3Krc9/bPEZIK2w
type: PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x007f 0x04b0
LegalCopyright:  
InternalName: Program
FileVersion: 0.0.0.0
CompanyName:  
LegalTrademarks:  
Comments:  
ProductName:  
ProductVersion:  
FileDescription:  
OriginalFilename: Program.exe

MSIL/Agent.DPU also known as:

K7AntiVirus	Trojan ( 00589cfd1 )
Cynet	Malicious (score: 100)
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Trojan:MSIL/Generic.b1188a3b
K7GW	Trojan ( 00589cfd1 )
Cybereason	malicious.eb6633
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Agent.DPU
APEX	Malicious
Avast	FileRepMalware
Kaspersky	HEUR:Trojan.MSIL.Zenpak.gen
BitDefender	Trojan.GenericKD.47400312
ViRobot	Trojan.Win32.Z.Agent.6144.CGX
MicroWorld-eScan	Trojan.GenericKD.47400312
Tencent	Msil.Trojan.Zenpak.Swur
Ad-Aware	Trojan.GenericKD.47400312
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34266.am0@aKXCyrf
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.54c103ff648b5935
Emsisoft	Trojan.GenericKD.47400312 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Agent.uwxgn
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Trojan.GenericKD.47400312
McAfee	Artemis!54C103FF648B
MAX	malware (ai score=82)
TrendMicro-HouseCall	TROJ_GEN.R002H0DKE21
Yandex	Trojan.Zenpak!ZM5bw5pNYJI
Ikarus	Trojan.MSIL.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.DPU!tr
AVG	FileRepMalware
Paloalto	generic.ml

How to remove MSIL/Agent.DPU?

MSIL/Agent.DPU removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X