What is “MSIL/HackTool.Agent.PH”?

The MSIL/HackTool.Agent.PH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/HackTool.Agent.PH virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine MSIL/HackTool.Agent.PH?


File Info:
crc32: 95BE9ACA
md5: e49e74311c7b97d1497880d6bd098854
name: E49E74311C7B97D1497880D6BD098854.mlw
sha1: 4c74b85d38d7688142ede19f8145554ff5590294
sha256: b9962f4200797cfa52507392ccc377b37a6cf604d7afbd9ba90c4c96be5f37e3
sha512: a7692e3fa96f93f9cc5c6e1f3025bb8d56ba9fccb415324fd157dc90b28a4abde589d2314a052368838f36c24b16e29c727dea57f7b0d9364571f8c78bc07e76
ssdeep: 384:a+iCrHCi7R89U6gTD+aBN7Y3O6EuVZTf4Pjf+7S1JxO4:a+THCdgTVBfaDTK7V
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 1.0.0.0
InternalName: SimpleClipper.exe
FileVersion: 1.0.0.0
ProductVersion: 1.0.0.0
FileDescription:  
OriginalFilename: SimpleClipper.exe

MSIL/HackTool.Agent.PH also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.46307372
Cylance	Unsafe
Zillya	Tool.Agent.Win32.71136
Alibaba	Trojan:MSIL/ClipBanker.40600173
K7GW	Riskware ( 0040eff71 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	MSIL/HackTool.Agent.PH
APEX	Malicious
Avast	Win32:Trojan-gen
BitDefender	Trojan.GenericKD.46307372
MicroWorld-eScan	Trojan.GenericKD.46307372
Ad-Aware	Trojan.GenericKD.46307372
TrendMicro	TROJ_GEN.R002C0DEI21
McAfee-GW-Edition	Artemis
FireEye	Trojan.GenericKD.46307372
Emsisoft	Trojan.GenericKD.46307372 (B)
Avira	TR/Hacktool.wizji
Microsoft	Trojan:MSIL/ClipBanker.GC!MTB
Arcabit	Trojan.Generic.D2C2982C
GData	Trojan.GenericKD.46307372
McAfee	Artemis!E49E74311C7B
MAX	malware (ai score=86)
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0DEI21
Rising	Trojan.ClipBanker!8.5FB (CLOUD)
Ikarus	Trojan.MSIL.ClipBanker
MaxSecure	Trojan.Malware.118114417.susgen
Fortinet	MSIL/Agent.PH!tr
AVG	Win32:Trojan-gen

How to remove MSIL/HackTool.Agent.PH?

MSIL/HackTool.Agent.PH removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X