Categories: Trojan

MSIL/TrojanDownloader.Agent.JRY removal tips

The MSIL/TrojanDownloader.Agent.JRY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/TrojanDownloader.Agent.JRY virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Drops a binary and executes it
Unconventionial language used in binary resources: Russian
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Created a process from a suspicious location

How to determine MSIL/TrojanDownloader.Agent.JRY?


File Info:
name: EE613018522AAD5EEEA3.mlwpath: /opt/CAPEv2/storage/binaries/e49a09c8b47f21970536a21d7a04e462ec244356901646381ac1e380b91a564acrc32: 6DDDD085md5: ee613018522aad5eeea373ddbebf21f6sha1: bdd60abead97d8dbf3f55f467c3555401f94208asha256: e49a09c8b47f21970536a21d7a04e462ec244356901646381ac1e380b91a564asha512: c35c52e61f42f8f22023af2c08c4bd595438e9c23ab071eba284fd4800861c0f4d974a17b79d515685813788625dc1d7e05709360e75e7118723a8479821e25dssdeep: 98304:JXhAmwO8eJ3psRK4b/CHzcDTxSL0Y2X5mMTvYefq52Bim9ga/VfIllxTUu8e7m:1hbP88psRK4b6II2X4MT9fZ9gQWxYK7mtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T15D563343F4226DB2D6015D7692191A30A67A7F224F2C8BDFB3E45A16D6742E073312FBsha3_384: ef9545a1ab7bdfab652913c54a24029e31ac269c68cc1a2f5016346569ce2a015d2b5bf45159c5d87107da1da1c37a1fep_bytes: e864040000e988feffff3b0d68e64300timestamp: 2021-06-11 09:16:47
Version Info:
0: [No Data]

MSIL/TrojanDownloader.Agent.JRY also known as:

Bkav	W32.QjukimanAI.Trojan
Lionic	Trojan.Win32.NanoBot.trQD
DrWeb	Trojan.DownLoader44.16653
MicroWorld-eScan	Trojan.GenericKD.47580985
FireEye	Generic.mg.ee613018522aad5e
CAT-QuickHeal	TrojanRansom.Blocker
ALYac	Trojan.GenericKD.47580985
Malwarebytes	Trojan.Dropper
Sangfor	Trojan.Win32.Sabsik.FL
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	Ransom:Win32/Blocker.a2ec845f
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZemsilF.34114.am0@amIc@N
Symantec	Trojan.Gen.MBT
ESET-NOD32	MSIL/TrojanDownloader.Agent.JRY
TrendMicro-HouseCall	TROJ_FRS.VSNTL621
Kaspersky	Trojan-Ransom.Win32.Blocker.txat
BitDefender	Trojan.GenericKD.47580985
Tencent	Msil.Trojan-downloader.Agent.Amvp
Ad-Aware	Trojan.GenericKD.47580985
Emsisoft	Trojan.GenericKD.47580985 (B)
Comodo	TrojWare.Win32.Agent.suvvo@0
TrendMicro	TROJ_FRS.VSNTL621
McAfee-GW-Edition	BehavesLike.Win32.Generic.vc
Sophos	Mal/Generic-S
Ikarus	Trojan-Downloader.MSIL.Agent
Avira	HEUR/AGEN.1142041
Antiy-AVL	Trojan/Generic.ASMalwS.34E9DCB
Kingsoft	Win32.Troj.Undef.(kcloud)
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Trojan.GenericKD.47580985
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Generic.C4817272
McAfee	Artemis!EE613018522A
MAX	malware (ai score=81)
VBA32	TrojanDropper.Dapato
Panda	Trj/CI.A
APEX	Malicious
Fortinet	MSIL/Agent.JRY!tr.dldr
AVG	Win32:Trojan-gen
Cybereason	malicious.ead97d
Avast	Win32:Trojan-gen