MSIL/TrojanDownloader.Agent.LED removal

The MSIL/TrojanDownloader.Agent.LED is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/TrojanDownloader.Agent.LED virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine MSIL/TrojanDownloader.Agent.LED?


File Info:
name: 369010EBCFC38C702F6C.mlw
path: /opt/CAPEv2/storage/binaries/e70a4b543f54e696e0f448647aa236075e601acff553b1555b841841d88359ad
crc32: 3379EDFC
md5: 369010ebcfc38c702f6cd365ad0d6e36
sha1: 258d67c726a152700ecae010c1e272bc8b1fca72
sha256: e70a4b543f54e696e0f448647aa236075e601acff553b1555b841841d88359ad
sha512: 7049db846bb7a846cdd3886459f6cd0aa63611347532bd060dd74334630f7a3a39c83210fd1ea5b05ce097bc5ef1ea574762a081f0802b7f387b5fda45bd672d
ssdeep: 12288:pPWYR2FA6WcjkKu83PhYy7KlV4dKNk7Ax/:pOYIFAIu83P3+qKl
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D2A423838A34DD11ED37A2B3528B177A1B6E58E475D21FC8483CD103075B646BF62EAD
sha3_384: 4537f606cb709701370ac7e795ec5c9dc92dfeb270025673810b7c2a931560f27671645f494592f6b14601688a65f940
ep_bytes: 
timestamp: 2053-07-03 23:23:43

Version Info:
0: [No Data]

MSIL/TrojanDownloader.Agent.LED also known as:

Bkav	W32.AIDetectNet.01
MicroWorld-eScan	Trojan.GenericKD.39471024
FireEye	Trojan.GenericKD.39471024
McAfee	AgentTesla-FDFR!369010EBCFC3
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.LED
APEX	Malicious
BitDefender	Trojan.GenericKD.39471024
Ad-Aware	Trojan.GenericKD.39471024
Sophos	Generic ML PUA (PUA)
Comodo	Heur.Corrupt.PE@1z141z3
DrWeb	Trojan.PackedNET.1277
Zillya	Downloader.Agent.Win32.466763
McAfee-GW-Edition	AgentTesla-FDFR!369010EBCFC3
Emsisoft	Trojan.GenericKD.39471024 (B)
SentinelOne	Static AI – Malicious PE
GData	Trojan.GenericKD.39471024
Jiangmin	Backdoor.MSIL.fntx
Arcabit	Trojan.Generic.D25A47B0
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.39471024
MAX	malware (ai score=85)
VBA32	Trojan.PackedNET
Malwarebytes	Trojan.Crypt
Ikarus	Trojan.Inject
Fortinet	MSIL/Agent.LED!tr
CrowdStrike	win/malicious_confidence_70% (D)

How to remove MSIL/TrojanDownloader.Agent.LED?

MSIL/TrojanDownloader.Agent.LED removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X