MSIL/TrojanDownloader.Agent.JOZ removal guide

The MSIL/TrojanDownloader.Agent.JOZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/TrojanDownloader.Agent.JOZ virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine MSIL/TrojanDownloader.Agent.JOZ?


File Info:
name: 3481ED84BDA0C1700110.mlw
path: /opt/CAPEv2/storage/binaries/08c6196347a1a2498af4a8689645763fbaeb4629b386fb7abcfa82a86283b6a8
crc32: 3CECC353
md5: 3481ed84bda0c1700110d310a7b70cfe
sha1: f8250a0e9c26a08fc28aa139f507a2142c5be59f
sha256: 08c6196347a1a2498af4a8689645763fbaeb4629b386fb7abcfa82a86283b6a8
sha512: 0dd594652f7b761f5652624e98823ec5765dd3b3d2f4b64dc3601a57a1cc79381d4bbad4bcb767a02ad4bd8536efc9887c51c9604c10983da7258014b5e40b76
ssdeep: 3072:zELfL1BG+gHfZBFqGk5VFpw3Riwy9/CPgJ7A5NxI+a4HqHbRzvb6NQk92b9ygR:aScAbxIBzRqDy9dR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13474B35573B84F21C9B99BF86861E13147F23D6A69AAE2084ED27CEF36B1F004D51B13
sha3_384: 0861ab4adb7be30b3244592e01ede5ad2ab2b59305c3858af6ba6eb59908bd57377a5a72487f9c401da40ea2e02fea0f
ep_bytes: 
timestamp: 2021-11-24 22:21:08

Version Info:
0: [No Data]

MSIL/TrojanDownloader.Agent.JOZ also known as:

Lionic	Trojan.Win32.Generic.4!c
DrWeb	Trojan.PWS.Stealer.31631
Zillya	Downloader.Agent.Win32.456315
Alibaba	Trojan:MSIL/Generic.f885bccc
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.JOZ
Cynet	Malicious (score: 100)
Comodo	Heur.Corrupt.PE@1z141z3
McAfee-GW-Edition	Artemis!Trojan
Ikarus	Trojan-Downloader.MSIL.Agent
Jiangmin	TrojanSpy.MSIL.bzqf
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Script/Phonzy.A!ml
APEX	Malicious
SentinelOne	Static AI – Suspicious PE
Fortinet	MSIL/Agent.JOZ!tr.dldr
CrowdStrike	win/malicious_confidence_90% (W)

How to remove MSIL/TrojanDownloader.Agent.JOZ?

MSIL/TrojanDownloader.Agent.JOZ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X