What is “MSIL/TrojanDownloader.Agent.PQD”?

The MSIL/TrojanDownloader.Agent.PQD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/TrojanDownloader.Agent.PQD virus can do?

Authenticode signature is invalid
Anomalous binary characteristics
Binary compilation timestomping detected

How to determine MSIL/TrojanDownloader.Agent.PQD?


File Info:
name: 0F9535A91CC23060B8CA.mlw
path: /opt/CAPEv2/storage/binaries/66f9ab8d401ddb7196021429fc6b55c099afcc48c689cdacc8f0d889e2929061
crc32: 747E428C
md5: 0f9535a91cc23060b8ca6cc3a46181bd
sha1: 1e0e8683df0c779f9ba2335995d8e9b7e94ab16a
sha256: 66f9ab8d401ddb7196021429fc6b55c099afcc48c689cdacc8f0d889e2929061
sha512: a98083e50078d3d73c61e196d1bbb4e37abd48b2b5181f7d94a05551bcffbab5dc80e3f4a61db42586edd6c1042f5f8686eff7f0d8b738590f5cbe8c0957a99f
ssdeep: 192:STPkBKAmU5yXB1SS9JrNjq9MOMLjsDDF9S:6PkBKAmrvzbrNj9LwDDF9
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F612E61857E8B232D5760B7BDC76A2404734EF42D963DF5E7C89305BADA33844A82B74
sha3_384: 89ceb335b7090cbb424d9af8e8e6d3e50801ced4d093e0e99389596da891d481c534ca92579cb7996874076155e6e501
timestamp: 2090-05-19 05:29:43

Version Info:
0: [No Data]

MSIL/TrojanDownloader.Agent.PQD also known as:

Bkav	W32.Common.4BD6149E
Elastic	malicious (high confidence)
FireEye	Generic.mg.0f9535a91cc23060
K7AntiVirus	Unwanted-Program ( 0059886f1 )
Alibaba	Trojan:MSIL/Generic.4386aef9
K7GW	Unwanted-Program ( 0059886f1 )
CrowdStrike	win/malicious_confidence_100% (W)
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.PQD
APEX	Malicious
Cynet	Malicious (score: 100)
Tencent	Msil.Trojan-Downloader.Ader.Sgil
SentinelOne	Static AI – Malicious PE
Google	Detected
Kingsoft	malware.kb.a.936
Xcitium	Heur.Corrupt.PE@1z141z3
Varist	W32/MSIL_Agent.GJJ.gen!Eldorado
Rising	Trojan.Generic@AI.86 (RDML:Sq2/mJeGNBlSs7q9qb/6Xw)
Ikarus	Trojan-Downloader.MSIL.Agent
Fortinet	PossibleThreat.PALLAS.H

How to remove MSIL/TrojanDownloader.Agent.PQD?

MSIL/TrojanDownloader.Agent.PQD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X