Trojan

MSIL/TrojanDownloader.Agent.HLE removal instruction

Malware Removal

The MSIL/TrojanDownloader.Agent.HLE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/TrojanDownloader.Agent.HLE virus can do?

  • Presents an Authenticode digital signature
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine MSIL/TrojanDownloader.Agent.HLE?


File Info:

crc32: 578063D3
md5: 3dfd654e06b2e38ec01f88db27abc717
name: 3DFD654E06B2E38EC01F88DB27ABC717.mlw
sha1: 003e1c1c71106f330c8fc332f795d46a1e3cf716
sha256: 586409e98ade6e754cfba0bd0aec2e8690a909c41cebac4085cad6f79d9676b4
sha512: 00da1dc8023ccf05956dad2f259eb79f297c893e5dd2b71e812dd692f24532a69358966dc408ee352f5db1a727f77f7c89ec2e2700efb76a2acb7ecd9bfc9ca3
ssdeep: 768:V6wF2v4MBy7GKywIbFson32tN/WVnX5n4/AAR65Dqh2:EwFS4yy7GK3AsonXVGvR65Dz
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

LegalCopyright: Copyright 2022 xa9 XmJEZWuk. All rights reserved.
Assembly Version: 0.6.8.2
InternalName: EegqWwdk.exe
FileVersion: 8.7.5.4
CompanyName: CMynBNEq
LegalTrademarks: WBHPMRHh
Comments: POvLVHGe
ProductName: EegqWwdk
ProductVersion: 0.6.8.2
FileDescription: WRFQATXh
OriginalFilename: EegqWwdk.exe
Translation: 0x0409 0x0514

MSIL/TrojanDownloader.Agent.HLE also known as:

Elasticmalicious (high confidence)
DrWebTrojan.Siggen12.2221
MicroWorld-eScanTrojan.GenericKD.36385376
FireEyeGeneric.mg.3dfd654e06b2e38e
ALYacTrojan.GenericKD.36385376
SangforTrojan.Win32.Wacatac.B
BitDefenderTrojan.GenericKD.36385376
K7AntiVirusTrojan ( 005783f11 )
BitDefenderThetaGen:NN.ZemsilF.34590.cm1@aasqDiji
CyrenW32/MSIL_Kryptik.DGB.gen!Eldorado
SymantecTrojan Horse
TrendMicro-HouseCallTrojan.MSIL.MALREP.THBBCBA
AvastWin32:DangerousSig [Trj]
KasperskyHEUR:Trojan-Downloader.MSIL.BaseLoader.gen
ViRobotTrojan.Win32.Z.Wacatac.42992
Ad-AwareTrojan.GenericKD.36385376
SophosMal/Generic-S
ComodoTrojWare.Win32.UMal.nshgq@0
F-SecureTrojan.TR/Kryptik.pdwxz
TrendMicroTrojan.MSIL.MALREP.THBBCBA
McAfee-GW-EditionArtemis!Trojan
EmsisoftTrojan.GenericKD.36385376 (B)
IkarusTrojan.Inject
AviraTR/Kryptik.pdwxz
KingsoftWin32.Heur.KVM019.a.(kcloud)
MicrosoftTrojanSpy:MSIL/AgentTesla.RT!MTB
ArcabitTrojan.Generic.D22B3260
ZoneAlarmHEUR:Trojan-Downloader.MSIL.BaseLoader.gen
GDataTrojan.GenericKD.36385376
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.C4345149
McAfeeArtemis!3DFD654E06B2
MAXmalware (ai score=83)
MalwarebytesTrojan.FakeSig.Generic
PandaTrj/CI.A
ESET-NOD32a variant of MSIL/TrojanDownloader.Agent.HLE
RisingDownloader.Agent!1.D296 (CLASSIC)
FortinetMalicious_Behavior.SB
WebrootW32.Trojan.Gen
AVGWin32:DangerousSig [Trj]
Paloaltogeneric.ml
Qihoo-360Trojan.Generic

How to remove MSIL/TrojanDownloader.Agent.HLE?

MSIL/TrojanDownloader.Agent.HLE removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment