Trojan

MSIL/TrojanClicker.Agent.NWM (file analysis)

Malware Removal

The MSIL/TrojanClicker.Agent.NWM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What MSIL/TrojanClicker.Agent.NWM virus can do?

    How to determine MSIL/TrojanClicker.Agent.NWM?

    

    File Info:
    
crc32: B6E19EFA
    md5: 6aa13e9f97c89291758cd4bfc0b3b140
    name: 6AA13E9F97C89291758CD4BFC0B3B140.mlw
    sha1: 7245416097baf82cd17d4ac5e29058d814d784fc
    sha256: f328058160260cb95cb63a9880da485e4f8335bdd1bd87a708f4a3a3808227fd
    sha512: b8b586f39129a7e1da8b1670bc282d733fecc91a52a90070f6bc7e660c88e949571b493cee4654c1ee43977c31fd9038e443a8270f3d382679032f1b9037ee33
    ssdeep: 768:mTSD1AZ6oRZQWrAVGElllHpC1LlllHpxk:eSJqMWrRn1Nk
    type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
    

    Version Info:
    
Translation: 0x0000 0x04b0
    LegalCopyright: Copyright xa9  2021
    Assembly Version: 15.1.1.244
    InternalName: mshotfix4.5.exe
    FileVersion: 15.1.1.244
    CompanyName: 
    LegalTrademarks: 
    Comments: 
    ProductName: Microsoft
    ProductVersion: 15.1.1.244
    FileDescription: Service Host: DNS Client
    OriginalFilename: mshotfix4.5.exe

    MSIL/TrojanClicker.Agent.NWM also known as:

    CynetMalicious (score: 85)
    ALYacTrojan.GenericKD.46007327
    CylanceUnsafe
    ZillyaTrojan.Agent.Win32.1913965
    SangforRiskware.Win32.Wacapew.C
    CrowdStrikewin/malicious_confidence_100% (W)
    AlibabaTrojan:MSIL/Blocker.cc0421b3
    K7GWTrojan ( 00579fa51 )
    K7AntiVirusTrojan ( 00579fa51 )
    CyrenW32/MSIL_Kryptik.DLQ.gen!Eldorado
    SymantecML.Attribute.HighConfidence
    ESET-NOD32a variant of MSIL/TrojanClicker.Agent.NWM
    APEXMalicious
    AvastWin32:Trojan-gen
    KasperskyHEUR:Trojan-Ransom.MSIL.Blocker.gen
    BitDefenderTrojan.GenericKD.46007327
    MicroWorld-eScanTrojan.GenericKD.46007327
    Ad-AwareTrojan.GenericKD.46007327
    SophosMal/Generic-S
    BitDefenderThetaGen:NN.ZemsilF.34670.gm0@aWAN7!n
    McAfee-GW-EditionArtemis
    FireEyeTrojan.GenericKD.46007327
    EmsisoftTrojan.GenericKD.46007327 (B)
    SentinelOneStatic AI – Malicious PE
    AviraTR/Clicker.coenb
    MicrosoftTrojan:Win32/Wacatac.B!ml
    ArcabitTrojan.Generic.D2BE041F
    AegisLabTrojan.MSIL.Blocker.j!c
    ZoneAlarmHEUR:Trojan-Ransom.MSIL.Blocker.gen
    GDataTrojan.GenericKD.46007327
    McAfeeArtemis!6AA13E9F97C8
    MAXmalware (ai score=88)
    VBA32TScope.Trojan.MSIL
    PandaTrj/GdSda.A
    RisingRansom.Blocker!8.12A (CLOUD)
    IkarusTrojan.MSIL.TrojanClicker
    FortinetMalicious_Behavior.SB
    AVGWin32:Trojan-gen
    Qihoo-360Win32/Ransom.Blocker.HwMARBsB

    How to remove MSIL/TrojanClicker.Agent.NWM?

    MSIL/TrojanClicker.Agent.NWM removal tool
    • Download and install GridinSoft Anti-Malware.
    • Open GridinSoft Anti-Malware and perform a “Standard scan“.
    • “Move to quarantine” all items.
    • Open “Tools” tab – Press “Reset Browser Settings“.
    • Select proper browser and options – Click “Reset”.
    • Restart your computer.

    You may also like

    About the author

    Paul Valéry

    I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

    View all posts

    Leave a Comment