MSIL/TrojanDownloader.Agent.FTM (file analysis)

The MSIL/TrojanDownloader.Agent.FTM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/TrojanDownloader.Agent.FTM virus can do?

Network activity detected but not expressed in API logs

How to determine MSIL/TrojanDownloader.Agent.FTM?


File Info:
crc32: 8D43CCA5
md5: f9ec398cbbb316ca802d3f60ab304990
name: tor.exe
sha1: 424a7a0d76621149565f3be9e100e6f583c27621
sha256: 9e28af8b31f65cfb148b6e11a9a01fcc1ff78c747131688ec307db441752097b
sha512: 07a0529e38604ba4aea4f1b12d0d8d57b2bb05f653f4c520e5604c81e491af7d0ba56d8d366db9e4844165821c19005c1fcc5d157d6fc7655d7f0db1dcbb861a
ssdeep: 3072:Y8FoOWasobtInBhwlvOvaNzOqnV+xnEdLw:Y3OWaVb47qnV+xnEd
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: eryt6rikhjjnr
Assembly Version: 1.0.0.2
InternalName: trurtuityik.exe
FileVersion: 1.0.0.9
CompanyName: ryhjtgyjh
LegalTrademarks: 
Comments: wt645rtutg
ProductName: et64r5utyi
ProductVersion: 1.0.0.9
FileDescription: jtyuiuy
OriginalFilename: trurtuityik.exe

MSIL/TrojanDownloader.Agent.FTM also known as:

MicroWorld-eScan	Trojan.Autoruns.GenericKD.41971269
FireEye	Trojan.Autoruns.GenericKD.41971269
CAT-QuickHeal	Trojan.MSIL
McAfee	RDN/Generic Downloader.x
Cylance	Unsafe
AegisLab	Trojan.Multi.Generic.4!c
K7AntiVirus	Trojan-Downloader ( 0055a8fb1 )
Alibaba	Trojan:MSIL/TorJok.2f76040a
K7GW	Trojan-Downloader ( 0055a8fb1 )
BitDefenderTheta	Gen:NN.ZemsilF.32245.hm0@aGMjRGo
Cyren	W32/Trojan.MUQJ-5653
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.FTM
APEX	Malicious
BitDefender	Trojan.Autoruns.GenericKD.41971269
Ad-Aware	Trojan.Autoruns.GenericKD.41971269
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Spy.Gen8
DrWeb	Trojan.DownLoader30.31946
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Trojan.MSIL.DLOADR.AK
McAfee-GW-Edition	RDN/Generic Downloader.x
Emsisoft	Trojan.GenericKD.32655602 (B)
SentinelOne	DFI – Suspicious PE
GData	Trojan.Autoruns.GenericKD.41971269
Webroot	W32.Trojan.GenKD
Avira	TR/Spy.Gen8
MAX	malware (ai score=85)
Microsoft	Trojan:Win32/Occamy.C
Arcabit	Trojan.Autoruns.Generic.D2806E45
ZoneAlarm	HEUR:Trojan.MSIL.TorJok.gen
AhnLab-V3	Malware/Win32.RL_Generic.C3539104
ALYac	Trojan.Autoruns.GenericKD.41971269
VBA32	TScope.Trojan.MSIL
Malwarebytes	Trojan.Downloader
TrendMicro-HouseCall	Trojan.MSIL.DLOADR.AK
Yandex	Trojan.TorJok!
Ikarus	Trojan-Downloader.MSIL.Agent
Fortinet	MSIL/TorJok!tr
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Win32/Trojan.Spy.155

How to remove MSIL/TrojanDownloader.Agent.FTM?

MSIL/TrojanDownloader.Agent.FTM removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X