Categories: Trojan

MSIL/TrojanDownloader.Agent.GDM removal guide

The MSIL/TrojanDownloader.Agent.GDM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/TrojanDownloader.Agent.GDM virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

Related domains:

pastebin.com

How to determine MSIL/TrojanDownloader.Agent.GDM?


File Info:
crc32: CE4E300Amd5: d4f0f1f70fd3566779a4e8773d8cf71fname: 1.exesha1: 61cadb884dba4d9455c8573bef9a5739225fbd1esha256: a96a32b738d6bc120400bccc1534d93cad1dbeb0b2bcec1224e12055516492b0sha512: db9f64630a6930117bbf1e9b8a57b32a8a4d1f69ad59608b3ec81b801148ca80462721b5f0a8b04691e45e54cf620ab14302624e8a1b25cc6ca43de538cf408assdeep: 384:qkidaBUOXLaf4T0xkXV+81GYvUv17CQFWU2:q5aBxuPuo8xUv1OQFWU2type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
Translation: 0x0000 0x04b0LegalCopyright:  Assembly Version: 0.0.0.0InternalName: Project1.exeFileVersion: 0.0.0.0ProductVersion: 0.0.0.0FileDescription:  OriginalFilename: Project1.exe

MSIL/TrojanDownloader.Agent.GDM also known as:

MicroWorld-eScan	Trojan.GenericKD.33620785
Qihoo-360	Win32/Trojan.ae8
McAfee	Artemis!D4F0F1F70FD3
AegisLab	Trojan.MSIL.Bladabindi.m!c
Sangfor	Malware
BitDefender	Trojan.GenericKD.33620785
K7GW	Trojan-Downloader ( 005641e41 )
Cybereason	malicious.84dba4
Arcabit	Trojan.Generic.D2010331
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.GDM
APEX	Malicious
Kaspersky	HEUR:Backdoor.MSIL.Bladabindi.gen
Alibaba	Backdoor:MSIL/Bladabindi.8e2ba246
Rising	Backdoor.Bladabindi!8.B1F (CLOUD)
Ad-Aware	Trojan.GenericKD.33620785
Emsisoft	Trojan.GenericKD.33620785 (B)
F-Secure	Backdoor.BDS/Bladabindi.nelvz
DrWeb	Trojan.Siggen9.34693
VIPRE	Trojan.Win32.Generic!BT
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.AdwareTskLnk.lc
Fortinet	MSIL/Bladabindi!tr.bdr
Trapmine	suspicious.low.ml.score
FireEye	Generic.mg.d4f0f1f70fd35667
Sophos	Mal/Generic-S
Ikarus	Trojan-Downloader.MSIL.Agent
Avira	BDS/Bladabindi.nelvz
MAX	malware (ai score=85)
Microsoft	Trojan:Win32/Bluteal!rfn
ZoneAlarm	HEUR:Backdoor.MSIL.Bladabindi.gen
ALYac	Trojan.MSIL.Bladabindi
Malwarebytes	Backdoor.Bladabindi
Panda	Trj/GdSda.A
Tencent	Msil.Trojan-downloader.Agent.Wtnc
eGambit	Unsafe.AI_Score_91%
GData	Trojan.GenericKD.33620785
BitDefenderTheta	Gen:NN.ZemsilF.34106.am0@a40iZbb
AVG	Win32:RATX-gen [Trj]
Avast	Win32:RATX-gen [Trj]
CrowdStrike	win/malicious_confidence_80% (W)
MaxSecure	Trojan.Malware.300983.susgen