What is “MSIL/TrojanDownloader.Agent.JUN”?

The MSIL/TrojanDownloader.Agent.JUN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/TrojanDownloader.Agent.JUN virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine MSIL/TrojanDownloader.Agent.JUN?


File Info:
name: 55C5C9DE7030781DF1AC.mlw
path: /opt/CAPEv2/storage/binaries/8dc97e8461d82867c6614377e9b9edf66deb33080ebc7b79749fabb4c4e65c8a
crc32: FC84B5BA
md5: 55c5c9de7030781df1ac845e382a0cd5
sha1: 347b36401662d578725924088576ec04330624fa
sha256: 8dc97e8461d82867c6614377e9b9edf66deb33080ebc7b79749fabb4c4e65c8a
sha512: d0cffda965f00e2b52f15a063ad0bafbfa38ac56b81b9d4a5e7ec5b7b711f4c575cb8634af4c9120e18861d5e5548d12c8cf2bc218106996644ec767956c1017
ssdeep: 768:PAYQVAzBkvrWrafChZT3WYPj9hPmWc/KpC+:4YQVAWvrWXXjrb7mWvpC+
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F563B2A0E2CC7CE1D42746F9AC39E608255AFB5A853D491939B6B50B24B32C370B7D1F
sha3_384: 7a779c9dfa78d1caa72d29a882e74438d30d2d13fd570afe0e6163dbfddeb488e27d39507674b6abc899ff79256af9e9
ep_bytes: ff250020400000000000000000000000
timestamp: 2087-05-07 13:25:55

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 
FileVersion: 1.0.0.0
InternalName: Svchost.exe
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: Svchost.exe
ProductName: 
ProductVersion: 1.0.0.0
Assembly Version: 1.2.0.0

MSIL/TrojanDownloader.Agent.JUN also known as:

Lionic	Trojan.MSIL.Orcus.l!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.47623633
FireEye	Generic.mg.55c5c9de7030781d
ALYac	Trojan.GenericKD.47623633
Cylance	Unsafe
Zillya	Downloader.Agent.Win32.457404
K7AntiVirus	Riskware ( 00584baa1 )
Alibaba	Backdoor:MSIL/NanoBot.b5e8a6a7
K7GW	Riskware ( 00584baa1 )
CrowdStrike	win/malicious_confidence_80% (W)
Symantec	Trojan Horse
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.JUN
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Backdoor.MSIL.NanoBot.gen
BitDefender	Trojan.GenericKD.47623633
Avast	Win32:RATX-gen [Trj]
Ad-Aware	Trojan.GenericKD.47623633
Sophos	Mal/Generic-S
DrWeb	Trojan.Nanocore.23
TrendMicro	TROJ_GEN.R049C0PLD21
McAfee-GW-Edition	RDN/Generic BackDoor
Emsisoft	Trojan.GenericKD.47623633 (B)
Ikarus	Trojan-Downloader.MSIL.Tiny
GData	Win32.Trojan.Agent.PJVRZQ
Avira	HEUR/AGEN.1140580
Gridinsoft	Ransom.Win32.Sabsik.sa
ViRobot	Trojan.Win32.Z.Stupidstealth.69120
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.C4841994
McAfee	RDN/Generic BackDoor
MAX	malware (ai score=81)
VBA32	CIL.StupidStealth.Heur
Malwarebytes	Malware.AI.3576919237
TrendMicro-HouseCall	TROJ_GEN.R049C0PLD21
Yandex	Trojan.AvsArher.bSIdr7
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_100%
Fortinet	MSIL/Agent.JEG!tr.dldr
BitDefenderTheta	Gen:NN.ZemsilF.34084.em0@a81RO9e
AVG	Win32:RATX-gen [Trj]
Panda	Trj/GdSda.A
MaxSecure	Trojan.Malware.300983.susgen

How to remove MSIL/TrojanDownloader.Agent.JUN?

MSIL/TrojanDownloader.Agent.JUN removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X