MSIL/TrojanDownloader.Agent.OAL removal guide

The MSIL/TrojanDownloader.Agent.OAL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/TrojanDownloader.Agent.OAL virus can do?

Authenticode signature is invalid
Binary compilation timestomping detected

How to determine MSIL/TrojanDownloader.Agent.OAL?


File Info:
name: BD8845A745B4AA247B81.mlw
path: /opt/CAPEv2/storage/binaries/8ebd563aa3e1916ad0b2bd48414b79e7200bd6c57cefad5092b2cb1e6d167862
crc32: 7338D885
md5: bd8845a745b4aa247b816411468e756c
sha1: 8dc2b538cd3f9d8b089c4bb185e17d30d8563948
sha256: 8ebd563aa3e1916ad0b2bd48414b79e7200bd6c57cefad5092b2cb1e6d167862
sha512: d5c412fa5589fab3e89f9593336f1510bd4c720692a7510b120262ba10a1715d5486adca2eaeab6f6c1ab7f9f917074bb4d2893a9575a5d33c6a56c04acea991
ssdeep: 48:6TafcfWu3crGfd2/40bC3C8NMD+/wHgsQV+7yKDFjqB354tdt0lrqeaqQ61FCpfG:xp+cAdwjMCP+/53KDFjan4epEzNt
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1B2B18312A7D84736EA738B72ACB75340027DFB21DD67EB6E2488520F2D176148A22F61
sha3_384: f6e0d506a8c294bdb4c7718af1921536bb4fdb8117363315375254a66dbf3ae5f7d7a99b36dffb55ea19ebb8d56e3d80
ep_bytes: ff250020400000000000000000000000
timestamp: 2078-02-25 17:27:00

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: ConsoleApp2
FileVersion: 1.0.0.0
InternalName: ConsoleApp2.exe
LegalCopyright: Copyright ©  2022
LegalTrademarks: 
OriginalFilename: ConsoleApp2.exe
ProductName: ConsoleApp2
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/TrojanDownloader.Agent.OAL also known as:

Lionic	Trojan.Win32.Generic.4!c
FireEye	Generic.mg.bd8845a745b4aa24
Malwarebytes	Generic.Malware/Suspicious
Sangfor	Downloader.Msil.Agent.V1hi
Alibaba	Trojan:MSIL/Generic.bee71473
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.OAL
Paloalto	generic.ml
Avast	Win32:TrojanX-gen [Trj]
Tencent	Msil.Trojan-Downloader.Ader.Xdkl
McAfee-GW-Edition	RDN/Generic.dx
Antiy-AVL	Trojan/Win32.Wacatac
AhnLab-V3	Trojan/Win.Generic.C5304881
McAfee	Artemis!BD8845A745B4
Cylance	unsafe
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002H0CEE23
Rising	Downloader.Agent!8.B23 (CLOUD)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Malicious_Behavior.SB
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove MSIL/TrojanDownloader.Agent.OAL?

MSIL/TrojanDownloader.Agent.OAL removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X