Should I remove “MSIL/TrojanDownloader.Agent.DHM”?

The MSIL/TrojanDownloader.Agent.DHM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/TrojanDownloader.Agent.DHM virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine MSIL/TrojanDownloader.Agent.DHM?


File Info:
crc32: 5A7C3B42
md5: 8702f029dd31e7b9f0f137cf6f6b26ee
name: 8702F029DD31E7B9F0F137CF6F6B26EE.mlw
sha1: 887a44279f39a2fa7ea7c4a976c9db510905b4fc
sha256: 205a803cccc2776b835d9c86dc0f7716778a59d6d8c7fe486cdbc1a45220db4e
sha512: e69bd741fef9e7dce9f6ce50b1118b0079dc1747f5402b5a89f5b5a7cf365bb70d62660742cec7456718e10a7975d9002f30b0095ee71211741b57e3acdbb947
ssdeep: 192:OIbZONBjhLmL/OL33oqLVLsPUc3QTya3U3:OIbINdhLmLWL33oqLVLEUcATyy
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2017
Assembly Version: 1.0.0.0
InternalName: WindowsFormsApplication1.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: WindowsFormsApplication1
ProductVersion: 1.0.0.0
FileDescription: WindowsFormsApplication1
OriginalFilename: WindowsFormsApplication1.exe

MSIL/TrojanDownloader.Agent.DHM also known as:

Lionic	Trojan.Win32.Generic.4!c
Zillya	Downloader.Agent.Win32.432818
Alibaba	Trojan:MSIL/Generic.bcf03853
Cybereason	malicious.79f39a
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.DHM
Avast	Win32:Malware-gen
NANO-Antivirus	Trojan.Win32.Generic.fgsuzf
Tencent	Msil.Trojan-downloader.Agent.Dyfy
Sophos	Generic ML PUA (PUA)
Comodo	Malware@#1dy58bgte1lx4
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.8702f029dd31e7b9
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1122584
eGambit	Unsafe.AI_Score_98%
Antiy-AVL	Trojan/Generic.ASMalwS.2713D57
Microsoft	Trojan:Win32/Occamy.C
McAfee	Artemis!8702F029DD31
Panda	Trj/GdSda.A
Yandex	Trojan.DL.Agent!xmDe/ASQD2g
Ikarus	Trojan-Downloader.MSIL.Tiny
Fortinet	MSIL/Injector.JAX!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove MSIL/TrojanDownloader.Agent.DHM?

MSIL/TrojanDownloader.Agent.DHM removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X