About "MSIL/Agent.THY" infection

The MSIL/Agent.THY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Agent.THY virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/Agent.THY?


File Info:
crc32: DD8392DB
md5: 5828a92e50847f773904e85878f2fc6a
name: 5828A92E50847F773904E85878F2FC6A.mlw
sha1: 33b4001d291e40fd950e36f3976e99dcef2327be
sha256: 8bc0620aa9e06ff8861c9cbba4ea13329b42b13fe35c9ba35c30580cf27068b3
sha512: d6ec10484ee04b60a5e7a37b319494b9ec11d1fb045ac422c8d70f81d774cd6283a2cb0f58d6aac48ffeceab8adbb0bdc4bcc69465b2217cbe73ad90a5c2db06
ssdeep: 384:IQE2qRnwQ4Dh9c95t5KmbZS+uJGxoptYcFSVc03K:RqZwQ4Dh9c9X5Rb7nx8tYcFSVc6K
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: BuildPacker.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: BuildPacker
ProductVersion: 1.0.0.0
FileDescription: BuildPacker
OriginalFilename: BuildPacker.exe

MSIL/Agent.THY also known as:

K7AntiVirus	Trojan ( 005732f31 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen13.19137
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.398652
Zillya	Trojan.Agent.Win32.2079923
CrowdStrike	win/malicious_confidence_70% (D)
K7GW	Trojan ( 005732f31 )
Cybereason	malicious.e50847
Cyren	W32/MSIL_Kryptik.EDT.gen!Eldorado
ESET-NOD32	a variant of MSIL/Agent.THY
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
ClamAV	Win.Malware.Ursu-9794593-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Bulz.398652
MicroWorld-eScan	Gen:Variant.Bulz.398652
Ad-Aware	Gen:Variant.Bulz.398652
BitDefenderTheta	Gen:NN.ZemsilF.34790.am0@a8vQ3Bl
McAfee-GW-Edition	GenericRXII-LF!5828A92E5084
FireEye	Generic.mg.5828a92e50847f77
Emsisoft	Gen:Variant.Bulz.398652 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:MSIL/AntiWD.YA!MTB
Arcabit	Trojan.Bulz.D6153C
GData	Gen:Variant.Bulz.398652
AhnLab-V3	Trojan/Win.LF.C4385804
McAfee	GenericRXII-LF!5828A92E5084
MAX	malware (ai score=87)
Malwarebytes	Trojan.Downloader
Panda	Trj/GdSda.A
Ikarus	Trojan-Downloader.MSIL.Tiny
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.THY!tr
AVG	Win32:TrojanX-gen [Trj]

How to remove MSIL/Agent.THY?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “MSIL/Agent.THY” infection