Trojan

MSIL/TrojanDownloader.Agent.KJJ removal tips

Malware Removal

The MSIL/TrojanDownloader.Agent.KJJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What MSIL/TrojanDownloader.Agent.KJJ virus can do?

  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Binary compilation timestomping detected

How to determine MSIL/TrojanDownloader.Agent.KJJ?



File Info:

name: E26332BA597D82950A53.mlw
path: /opt/CAPEv2/storage/binaries/ba09eafe9b45a49e16bb277c104affbd5cef4cb0b65fd3c4a7f84103caf15e1e
crc32: AB5BE29B
md5: e26332ba597d82950a5316ca0072cbd8
sha1: 69ff73192b6adcb30ae4b582eace01f8bbf17d21
sha256: ba09eafe9b45a49e16bb277c104affbd5cef4cb0b65fd3c4a7f84103caf15e1e
sha512: d838f15a4d5f16c13e23123f9f61c12d0fc081aa117f017664a00b3a6f0ae1e48fbf6320d036f6b5ab515600831d8c8702d4cb23bca26cd79878f32b173ed34c
ssdeep: 6144:duqK0Am6gWDka/aFWTo5lYWlkiU/S7S44n63BWevxPUY:Ngm6gWDpaFWTo5lYWlkiU/S7S44n63BP
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E964F171B2460B9FE5A610B4C1587BC54E6009F15DB6FA11FE263DAA77183829E3CFB0
sha3_384: f2ef58f4ae790dd31229cbeec8b90237cfe865f565f91a5da94b87b2266d658216a7cb317189bd7fa9618df5ab3bf1db
ep_bytes: ff250020400000000000000000000000
timestamp: 2063-04-27 20:49:34


Version Info:

Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Software inc.
FileVersion: 1.0.0.0
InternalName: LoaderFor@Aureliun_v2.exe
LegalCopyright: Copyright ©  2022
LegalTrademarks: 
OriginalFilename: LoaderFor@Aureliun_v2.exe
ProductName: Bested sellers
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/TrojanDownloader.Agent.KJJ also known as:

LionicTrojan.MSIL.Stealer.l!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
FireEyeGeneric.mg.e26332ba597d8295
McAfeeGenericRXRR-ZR!E26332BA597D
CylanceUnsafe
K7AntiVirusTrojan-Downloader ( 0058e35f1 )
K7GWTrojan-Downloader ( 0058e35f1 )
CrowdStrikewin/malicious_confidence_100% (W)
CyrenW32/MSIL_Agent.CSM.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/TrojanDownloader.Agent.KJJ
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan-Spy.MSIL.Stealer.gen
BitDefenderTrojan.GenericKD.48298848
MicroWorld-eScanTrojan.GenericKD.48298848
AvastWin32:DropperX-gen [Drp]
TencentMsil.Trojan-downloader.Agent.Aihn
Ad-AwareTrojan.GenericKD.48298848
SophosMal/Generic-S
ZillyaDownloader.Agent.Win32.461336
TrendMicroTROJ_GEN.R06CC0PBF22
McAfee-GW-EditionGenericRXRR-ZR!E26332BA597D
EmsisoftTrojan.GenericKD.48298848 (B)
IkarusTrojan-Downloader.MSIL.Agent
GDataTrojan.GenericKD.48298848
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1203885
GridinsoftRansom.Win32.Sabsik.sa
ArcabitTrojan.Generic.D2E0FB60
ZoneAlarmHEUR:Trojan-Spy.MSIL.Stealer.gen
MicrosoftTrojan:Win32/Tiggre!rfn
AhnLab-V3Trojan/Win.UD.C4966945
BitDefenderThetaGen:NN.ZemsilF.34232.um0@a8WVSUl
ALYacTrojan.GenericKD.48298848
MAXmalware (ai score=87)
VBA32TScope.Trojan.MSIL
MalwarebytesTrojan.Downloader.Discord
TrendMicro-HouseCallTROJ_GEN.R06CC0PBF22
RisingTrojan.Generic/MSIL@AI.100 (RDM.MSIL:AGMxnOyM/fX5VaZI4EEU3g)
SentinelOneStatic AI – Malicious PE
FortinetMalicious_Behavior.SB
AVGWin32:DropperX-gen [Drp]
Cybereasonmalicious.92b6ad
PandaTrj/GdSda.A

How to remove MSIL/TrojanDownloader.Agent.KJJ?

MSIL/TrojanDownloader.Agent.KJJ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment