Trojan

How to remove “MSIL/TrojanDownloader.Agent.HZB”?

Malware Removal

The MSIL/TrojanDownloader.Agent.HZB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/TrojanDownloader.Agent.HZB virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine MSIL/TrojanDownloader.Agent.HZB?


File Info:

crc32: 91D9BD2B
md5: 12a8f6823df64a6693d837d994ec9e1b
name: 12A8F6823DF64A6693D837D994EC9E1B.mlw
sha1: d37d2b323c145fabae3869970f2a774f0d0184e7
sha256: 1299373ec40fc1f3f16957338574a9ad51a94e62220cc8c08f1ad81dee443544
sha512: 4cd80ab40ab896a1828c90d352dc9fff1fe5bbe3dad50f18028c80fc5493f4ae589e43865aaf286742a6527b3d528194a2770b05865d4334e00cd51f02bca43d
ssdeep: 6144:OBDwHfx1PCOHbCQPW9peuc46jylqut6j2g:6UDDVPepd6iq3v
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: xa9Firefox and Mozilla Developers; available under the MPL 2 license.
Assembly Version: 78.10.0.7792
InternalName: ConsoleApp10.exe
FileVersion: 78.10.0.7792
CompanyName: Mozilla Corporation
LegalTrademarks: Firefox is a Trademark of The Mozilla Foundation.
Comments: Tor Browser
ProductName: Tor Browser
ProductVersion: 78.10.0.7792
FileDescription: Tor Browser
OriginalFilename: ConsoleApp10.exe

MSIL/TrojanDownloader.Agent.HZB also known as:

Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (W)
Cybereasonmalicious.23c145
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/TrojanDownloader.Agent.HZB
APEXMalicious
AvastFileRepMalware
KasperskyUDS:Trojan-Downloader.MSIL.Seraph.gen
SophosML/PE-A
BitDefenderThetaGen:NN.ZemsilF.34692.Cm0@a8Q6mkc
McAfee-GW-EditionBehavesLike.Win32.Generic.gh
FireEyeGeneric.mg.12a8f6823df64a66
SentinelOneStatic AI – Malicious PE
WebrootW32.Malware.Gen
eGambitUnsafe.AI_Score_99%
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftProgram:Win32/Wacapew.C!ml
McAfeeRDN/AsyncRAT
MalwarebytesMachineLearning/Anomalous.100%
RisingTrojan.Woreflint!8.F5EA (CLOUD)
MaxSecureTrojan.Malware.300983.susgen
AVGFileRepMalware
Paloaltogeneric.ml

How to remove MSIL/TrojanDownloader.Agent.HZB?

MSIL/TrojanDownloader.Agent.HZB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment