MSIL/HackTool.Agent.AV malicious file

The MSIL/HackTool.Agent.AV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/HackTool.Agent.AV virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine MSIL/HackTool.Agent.AV?


File Info:
crc32: 8B0A56EF
md5: ef5f7b7f9294251aff96e66890daa454
name: EF5F7B7F9294251AFF96E66890DAA454.mlw
sha1: 0f85651fe09b62f3f8601adddd0f7f4914561fbd
sha256: 5fcaf0df77f4ef11e10a3e9f2d0849da3773b57a7fd5c9b2b8cf21a4c0c3d525
sha512: 9f26b1e28a4033ba609544159a328664d0df8bfc7b5f6f8f0532d296508caea5bce5ff2f7022bb0e2104d32299e295ea075ae37e81b76345f46bbdc84e522bb0
ssdeep: 6144:No3X8nTCAvCkxYZyer7x8LbIHKpy66RiRwux1w8bfwVSnSVKd08dBiymrltb3V3:KXAvCLQLUqpy66RiRF1wofwV8kfjR
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2018
Assembly Version: 1.0.0.0
InternalName: turbo.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Turbo
ProductVersion: 1.0.0.0
FileDescription: Turbo
OriginalFilename: turbo.exe

MSIL/HackTool.Agent.AV also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.MSILPerseus.144318
ALYac	Gen:Variant.MSILPerseus.144318
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_80% (D)
ESET-NOD32	a variant of MSIL/HackTool.Agent.AV
APEX	Malicious
Avast	FileRepMalware
BitDefender	Gen:Variant.MSILPerseus.144318
Ad-Aware	Gen:Variant.MSILPerseus.144318
Sophos	Generic PUA AP (PUA)
BitDefenderTheta	Gen:NN.ZemsilF.34294.Nm0@aighCrg
VIPRE	Trojan.Win32.Generic!BT
FireEye	Generic.mg.ef5f7b7f9294251a
Emsisoft	Gen:Variant.MSILPerseus.144318 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Wacatac.A!ml
Arcabit	Trojan.MSILPerseus.D233BE
MAX	malware (ai score=84)
Malwarebytes	MachineLearning/Anomalous.100%
Ikarus	Trojan.MSIL.Crypt
eGambit	Unsafe.AI_Score_99%
Fortinet	MSIL/Agent.AV!tr
AVG	FileRepMalware
Paloalto	generic.ml

How to remove MSIL/HackTool.Agent.AV?

MSIL/HackTool.Agent.AV removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X