Trojan

MSIL/TrojanDownloader.Agent.GZR removal tips

Malware Removal

The MSIL/TrojanDownloader.Agent.GZR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/TrojanDownloader.Agent.GZR virus can do?

  • Network activity detected but not expressed in API logs
  • Mimics icon used for popular non-executable file format
  • Anomalous binary characteristics

How to determine MSIL/TrojanDownloader.Agent.GZR?


File Info:

crc32: CF94C528
md5: c5a3bac0b5c7bb1cf46260ddfc8ac570
name: C5A3BAC0B5C7BB1CF46260DDFC8AC570.mlw
sha1: 6ecfe419e2596cdc9a1419a5cc35f895fee97425
sha256: a419613e71b06fccc4e8aaeb77b76d9dda48ea3aa55112daa2572f01d8ca78f9
sha512: 2815356d13dff7a6a416a98a1d08b3d46dd0b9762eb4bf9d8e9cbde2a3129738a42ca8ef72c0d2c88977417d75e09ebbbb9b6dade5408a660bf1d99caa7b4a88
ssdeep: 768:h/YOeeQPcIUxToU81aJD0LrVslZg3CCuc:h/YOefPnU5amgnEEuc
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

0: [No Data]

MSIL/TrojanDownloader.Agent.GZR also known as:

Elasticmalicious (high confidence)
McAfeeRDN/Generic.dx
MalwarebytesTrojan.Crypt.MSIL.Generic
SangforMalware
K7AntiVirusTrojan-Downloader ( 005729cb1 )
K7GWTrojan-Downloader ( 005729cb1 )
Cybereasonmalicious.9e2596
CyrenW32/Trojan.AEYQ-8735
SymantecML.Attribute.HighConfidence
KasperskyHEUR:Trojan-PSW.MSIL.Agensla.gen
AlibabaTrojanPSW:MSIL/Agensla.9e323208
TencentWin32.Trojan.Inject.Auto
F-SecureTrojan.TR/Dldr.Agent.jcdbm
DrWebTrojan.Siggen11.3723
InvinceaMal/Generic-S
McAfee-GW-EditionBehavesLike.Win32.Generic.qm
FireEyeGeneric.mg.c5a3bac0b5c7bb1c
SophosMal/Generic-S
IkarusTrojan-Downloader.MSIL.Agent
AviraTR/Dldr.Agent.jcdbm
eGambitUnsafe.AI_Score_97%
MAXmalware (ai score=99)
MicrosoftTrojan:Win32/Woreflint.A!cl
ViRobotTrojan.Win32.Z.Woreflint.52736
ZoneAlarmHEUR:Trojan-PSW.MSIL.Agensla.gen
GDataWin32.Trojan.Agent.2A1OGL
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.AgentTesla.C4223480
CylanceUnsafe
ESET-NOD32a variant of MSIL/TrojanDownloader.Agent.GZR
RisingDropper.Generic!8.35E (TFE:C:yLd8KatmMRU)
SentinelOneStatic AI – Malicious PE
FortinetMalicious_Behavior.SB
BitDefenderThetaGen:NN.ZemsilF.34634.dmW@a47nuxk
AVGWin32:Malware-gen
AvastWin32:Malware-gen
CrowdStrikewin/malicious_confidence_90% (D)
Qihoo-360Generic/HEUR/QVM03.0.3967.Malware.Gen

How to remove MSIL/TrojanDownloader.Agent.GZR?

MSIL/TrojanDownloader.Agent.GZR removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment