Trojan

MSIL/TrojanDownloader.Agent.HEK removal tips

Malware Removal

The MSIL/TrojanDownloader.Agent.HEK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/TrojanDownloader.Agent.HEK virus can do?

  • Presents an Authenticode digital signature
  • Network activity detected but not expressed in API logs

How to determine MSIL/TrojanDownloader.Agent.HEK?


File Info:

crc32: B27B6847
md5: 482d5806bdb0c6973deb14e7b371ca3c
name: 482D5806BDB0C6973DEB14E7B371CA3C.mlw
sha1: 700d3253a5f0b9bfe7f7fcffae1e4d156f35c84c
sha256: a8fd70d495674b3da68cc393c67235daa2ea27475119ab9b5d6b247f7fa65399
sha512: 4684444bc0ec79120f8a00bc30384020c6482df26e3e745ae29d6663a37737eada31c7ac6a0bd875476985ea5c43076e94f4b334cdb9c667f998e6d3c44043e2
ssdeep: 12288:1Zi4sAXZM0mDWeI1gCWLQlTbbhN99m/jfB9XD91cqf0KE9i4zB0KBFfmJsOy0tvI:16Q
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

0: [No Data]

MSIL/TrojanDownloader.Agent.HEK also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.35851964
FireEyeGeneric.mg.482d5806bdb0c697
CAT-QuickHealTrojan.Multi
ALYacTrojan.GenericKD.35851964
CylanceUnsafe
K7AntiVirusTrojan ( 005753891 )
BitDefenderTrojan.GenericKD.35851964
K7GWTrojan ( 005753891 )
Cybereasonmalicious.3a5f0b
CyrenW32/MSIL_Kryptik.CNH.gen!Eldorado
SymantecTrojan.Gen.2
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan.MSIL.Scarsi.gen
AlibabaTrojan:MSIL/Scarsi.b6d8e634
ViRobotTrojan.Win32.Z.Agent.3426384
Ad-AwareTrojan.GenericKD.35851964
EmsisoftTrojan.GenericKD.35851964 (B)
F-SecureTrojan.TR/Kryptik.gskms
DrWebTrojan.PackedNET.491
TrendMicroTROJ_GEN.R066C0PLT20
McAfee-GW-EditionPWS-FCTJ!482D5806BDB0
SophosMal/Generic-S
IkarusTrojan.MSIL.Inject
AviraTR/Kryptik.gskms
MAXmalware (ai score=87)
KingsoftWin32.Heur.KVM019.a.(kcloud)
MicrosoftTrojan:MSIL/Kryptik!MSR
GridinsoftTrojan.Win32.Kryptik.oa
ArcabitTrojan.Generic.D2230EBC
ZoneAlarmHEUR:Trojan.MSIL.Scarsi.gen
GDataTrojan.GenericKD.35851964
CynetMalicious (score: 100)
AhnLab-V3PUP/Win32.RL_Generic.C4279779
McAfeePWS-FCTJ!482D5806BDB0
VBA32TScope.Trojan.MSIL
MalwarebytesTrojan.Crypt.MSIL
PandaTrj/GdSda.A
ESET-NOD32a variant of MSIL/TrojanDownloader.Agent.HEK
TrendMicro-HouseCallTROJ_GEN.R066C0PLT20
TencentMsil.Trojan.Scarsi.Pbpl
FortinetMalicious_Behavior.SB
BitDefenderThetaGen:NN.ZemsilF.34700.rlX@aO8hf9p
AVGWin32:DangerousSig [Trj]
AvastWin32:DangerousSig [Trj]
Qihoo-360Generic/Trojan.31e

How to remove MSIL/TrojanDownloader.Agent.HEK?

MSIL/TrojanDownloader.Agent.HEK removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment