Categories: Malware

MSIL/PSW.Agent.SZC removal guide

The MSIL/PSW.Agent.SZC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/PSW.Agent.SZC virus can do?

Authenticode signature is invalid
Binary compilation timestomping detected

How to determine MSIL/PSW.Agent.SZC?


File Info:
name: 969DCCCF9578D4E634BD.mlwpath: /opt/CAPEv2/storage/binaries/a4c1421567878180b905aeccca79f7979c87d93f4c8b94b615d90b724104823acrc32: E0F8031Amd5: 969dcccf9578d4e634bd5d28fa673e28sha1: 0f4513eaa7930789331e7ed13d0210f820db128asha256: a4c1421567878180b905aeccca79f7979c87d93f4c8b94b615d90b724104823asha512: 9f781f28e5d5db386d863603749e22761346218310203282310764eaf29b5ee93faa5b1645be349c961ee6f435eb498d736b2cf09d01aa1537c6c73fa614fb89ssdeep: 6144:lloZM3fsXtioRkts/cnnK6cMlPpUiAfboaxUyzzqBapswp8e1mqi:noZ1tlRk83MlPpUiAfboaxUyzzq0pJYtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1A3345A5837B88F12E25F8BBEE5B1549F8771F103E90AF7CE0C8895EC2411B42E949A57sha3_384: 5d2d3875bd96befbd41b97c77d0e9ab19e4679a60264725c923907408818ff6b078be3b67e433c81b1bf91fd392da020ep_bytes: ff250020400000000000000000000000timestamp: 2053-02-19 18:54:36
Version Info:
Translation: 0x0000 0x04b0Comments: Payload for Umbral StealerCompanyName: FileDescription: FileVersion: 1.0.0.0InternalName: LegalCopyright: LegalTrademarks: OriginalFilename: ProductName: ProductVersion: 1.0.0.0Assembly Version: 1.0.0.0

MSIL/PSW.Agent.SZC also known as:

Lionic	Trojan.Win32.Dizemp.4!c
DrWeb	Trojan.PWS.Stealer.36948
MicroWorld-eScan	IL:Trojan.MSILZilla.27419
ClamAV	Win.Packed.Msilzilla-9952790-0
FireEye	Generic.mg.969dcccf9578d4e6
ALYac	IL:Trojan.MSILZilla.27419
Cylance	unsafe
Zillya	Trojan.Dizemp.Win32.479
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Password-Stealer ( 005a3e671 )
Alibaba	Trojan:MSIL/Dizemp.5f654860
K7GW	Password-Stealer ( 005a3e671 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZemsilF.36318.om0@aOsDFAk
Cyren	W32/MSIL_Agent.FGE.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/PSW.Agent.SZC
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.MSIL.Dizemp.gen
BitDefender	IL:Trojan.MSILZilla.27419
Tencent	Malware.Win32.Gencirc.13d1acb1
Emsisoft	IL:Trojan.MSILZilla.27419 (B)
F-Secure	Heuristic.HEUR/AGEN.1307507
VIPRE	IL:Trojan.MSILZilla.27419
TrendMicro	TROJ_GEN.R002C0XFE23
McAfee-GW-Edition	GenericRXWC-QA!969DCCCF9578
Sophos	Troj/Umbral-A
SentinelOne	Static AI – Malicious PE
GData	IL:Trojan.MSILZilla.27419
Jiangmin	Trojan.MSIL.aoobx
Avira	HEUR/AGEN.1307507
MAX	malware (ai score=100)
Antiy-AVL	Trojan/MSIL.Dizemp
Arcabit	IL:Trojan.MSILZilla.D6B1B
ZoneAlarm	HEUR:Trojan.MSIL.Dizemp.gen
Microsoft	Trojan:MSIL/FormBook.CD!MTB
Google	Detected
AhnLab-V3	Trojan/Win.MSILZilla.C5437246
McAfee	GenericRXWC-QA!969DCCCF9578
DeepInstinct	MALICIOUS
VBA32	TScope.Trojan.MSIL
Malwarebytes	PasswordStealer.Spyware.Stealer.DDS
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002C0XFE23
Rising	Stealer.Agent!8.C2 (CLOUD)
Yandex	Trojan.PWS.Agent!ctIzRdhYH8A
Ikarus	Trojan.MSIL.PSW
MaxSecure	Trojan.Malware.100993507.susgen
Fortinet	MSIL/Agent.SZC!tr.pws
AVG	Win32:DropperX-gen [Drp]
Avast	Win32:DropperX-gen [Drp]