MSIL/TrojanDownloader.Agent.IJL removal

The MSIL/TrojanDownloader.Agent.IJL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/TrojanDownloader.Agent.IJL virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine MSIL/TrojanDownloader.Agent.IJL?


File Info:
crc32: 783412D3
md5: 1d2110950be86f52363fb6a000b4c44a
name: 1D2110950BE86F52363FB6A000B4C44A.mlw
sha1: a6405b39bcf1929f85c3623b8ee0cafb1f63ca1b
sha256: 9dcd3fe50a91137978bf69f3996d0fa3336f1e6343a284315e3ca6698b131164
sha512: 35ee6ac7cacc2dfe99478ba88536f55fec7eaf48dbe4028d95fad4be59844c7b5ea5d5c01e5863980133b963eaf14a946a2bf25fb6b66712610e141828b45ab6
ssdeep: 384:D72vWqIRMDkNdR/j2VTDaL2Eao2s+bxE8ap9uiH7KchZHPI9RfIKkOXzPUrhmzg:D7GWq/gj2q3ai9vH7HQPAo5NvhP1Sre
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: WindowsFormsApp1.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: WindowsFormsApp1
ProductVersion: 1.0.0.0
FileDescription: WindowsFormsApp1
OriginalFilename: WindowsFormsApp1.exe

MSIL/TrojanDownloader.Agent.IJL also known as:

Lionic	Trojan.MSIL.Agensla.i!c
Elastic	malicious (high confidence)
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	TrojanPSW:MSIL/Agensla.70ab5e9c
K7GW	Trojan-Downloader ( 0057fbf51 )
Cyren	W32/MSIL_Kryptik.EXN.gen!Eldorado
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.IJL
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-PSW.MSIL.Agensla.gen
ViRobot	Trojan.Win32.S.Agent.24576.CZL
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilCO.34050.bm0@a0afDan
McAfee-GW-Edition	GenericRXAB-IA!1D2110950BE8
FireEye	Generic.mg.1d2110950be86f52
SentinelOne	Static AI – Malicious PE
Avira	TR/Dldr.Agent.lygpa
eGambit	Unsafe.AI_Score_98%
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Agensla.gen
GData	Win32.Trojan.Agent.6NQNGK
McAfee	PWS-FCYS!1D2110950BE8
VBA32	TScope.Trojan.MSIL
Malwarebytes	Trojan.Downloader
TrendMicro-HouseCall	TROJ_GEN.R002H06GM21
Ikarus	Trojan.Inject
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.IJL!tr
AVG	Win32:Malware-gen

How to remove MSIL/TrojanDownloader.Agent.IJL?

MSIL/TrojanDownloader.Agent.IJL removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X