MSIL/PSW.Agent.ONZ (file analysis)

The MSIL/PSW.Agent.ONZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/PSW.Agent.ONZ virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/PSW.Agent.ONZ?


File Info:
crc32: 6B110BBA
md5: 75d5e01966a3a9df87f3b7b39cc4f27c
name: 75D5E01966A3A9DF87F3B7B39CC4F27C.mlw
sha1: 89ac7efc6b68e059576c0ebb76208bfa01aea189
sha256: 1e09e4e7d017cc9cc003ee208834bb879acbcbc0e5879967ed840b9033abbb55
sha512: 633958c01fea5c9337a4980c6cd748cf4d05f55680c36898f045064980b606d694c2184341269025c63f7bb9c44f8aec580914fcf9de57820c66b4b9883063c3
ssdeep: 768:YFhfc1LtoddFh4HKcnr0eABcaT8cb4cc7v:WUkdLWbr05BJb4cW
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2018
Assembly Version: 1.0.0.0
InternalName: WindowsApplication1.exe
FileVersion: 1.0.0.0
ProductName: WindowsApplication1
ProductVersion: 1.0.0.0
FileDescription: WindowsApplication1
OriginalFilename: WindowsApplication1.exe

MSIL/PSW.Agent.ONZ also known as:

DrWeb	Trojan.PWS.StealerNET.2
Cynet	Malicious (score: 99)
CrowdStrike	win/malicious_confidence_60% (D)
Alibaba	Trojan:MSIL/Generic.95f5fa05
Cybereason	malicious.c6b68e
Baidu	MSIL.Trojan.Agent.p
ESET-NOD32	a variant of MSIL/PSW.Agent.ONZ
APEX	Malicious
Avast	FileRepMalware
Sophos	Mal/Generic-S
Comodo	Malware@#1fdcmafdkudp6
McAfee-GW-Edition	Artemis
FireEye	Generic.mg.75d5e01966a3a9df
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1106944
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Artemis!75D5E01966A3
Ikarus	Trojan.MSIL.PSW
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.NRZ!tr.pws
AVG	FileRepMalware
Paloalto	generic.ml

How to remove MSIL/PSW.Agent.ONZ?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

MSIL/PSW.Agent.ONZ (file analysis)