MSIL/TrojanDownloader.Agent.INQ removal guide

The MSIL/TrojanDownloader.Agent.INQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/TrojanDownloader.Agent.INQ virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine MSIL/TrojanDownloader.Agent.INQ?


File Info:
crc32: 51F3F9C0
md5: 18e0d5a8cffe695d5961ecde3fd53e91
name: 18E0D5A8CFFE695D5961ECDE3FD53E91.mlw
sha1: 316e1018e862e5bbcc0e1bd9c895cb852f9df006
sha256: 7c8092b869dd2fa4cddbd90a8f7af2d87ec403a0af2b80a55581f3f541e7a149
sha512: 3e153401a62c1f8a763c1c4d930418c8cf01617a7a944aed534434e5fd5501dc9b236fa37259dfa9b277604822054fa01349fad2cf983628b63be45ea1389fe2
ssdeep: 1536:5gnvGJ8OixQdYlLCaMcWCTxa8dcIodHL0m5/Ew:iQKa9
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2016
Assembly Version: 1.0.0.0
InternalName: OyuncakAraba.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: OyuncakAraba
ProductVersion: 1.0.0.0
FileDescription: OyuncakAraba
OriginalFilename: OyuncakAraba.exe

MSIL/TrojanDownloader.Agent.INQ also known as:

Elastic	malicious (high confidence)
CrowdStrike	win/malicious_confidence_60% (D)
Symantec	MSIL.Downloader!gen7
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.INQ
APEX	Malicious
Kaspersky	UDS:Trojan.Multi.GenericML.xnet
Sophos	Mal/Generic-R
BitDefenderTheta	Gen:NN.ZemsilF.34058.em0@aCM!rVm
VIPRE	Trojan.Win32.Generic.pak!cobra
McAfee-GW-Edition	Artemis
FireEye	Generic.mg.18e0d5a8cffe695d
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Woreflint.A!cl
ZoneAlarm	UDS:DangerousObject.Multi.Generic
McAfee	Artemis!18E0D5A8CFFE
Ikarus	Win32.Outbreak

How to remove MSIL/TrojanDownloader.Agent.INQ?

MSIL/TrojanDownloader.Agent.INQ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X