Trojan

Should I remove “MSIL/TrojanDownloader.Agent_AGen.I”?

Malware Removal

The MSIL/TrojanDownloader.Agent_AGen.I is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/TrojanDownloader.Agent_AGen.I virus can do?

  • Presents an Authenticode digital signature
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine MSIL/TrojanDownloader.Agent_AGen.I?


File Info:

crc32: EBAD6E82
md5: 7f7091b565e46dcee2a5f40c26b13b0d
name: 7F7091B565E46DCEE2A5F40C26B13B0D.mlw
sha1: ee5f6ae6f6cca78669b53ac7a225df39156f4919
sha256: ba89594387dfeb48860b9680849784d36276953f694c3acb0d6bf449e9a0f370
sha512: 727d232107e487c1cb1d53c573970592e713c3b412269953201278374af51c9d4148d16cf583bca4fb7352d4bdfbadbaeef27257f78c4f0cc51865acd044903a
ssdeep: 1536:cm8y+T/f3HoXTuU0TbWs0imlE5ckqwO81B85erd8:4rHQTcsa5AwO8n85erd
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 1.1.0.1
InternalName: odsakdsao.exe
FileVersion: 1.1.0.1
CompanyName: odsakdsao
LegalTrademarks:
Comments: odsakdsao
ProductName:
ProductVersion: 1.1.0.1
FileDescription: odsakdsao
OriginalFilename: odsakdsao.exe

MSIL/TrojanDownloader.Agent_AGen.I also known as:

LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Stealer.31032
ClamAVWin.Packed.Generickdz-9879553-0
ALYacTrojan.GenericKD.47015764
CylanceUnsafe
AlibabaTrojanSpy:MSIL/Redline.646b97b3
K7GWTrojan-Downloader ( 00585f661 )
K7AntiVirusTrojan-Downloader ( 00585f661 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/TrojanDownloader.Agent_AGen.I
APEXMalicious
AvastWin32:DangerousSig [Trj]
BitDefenderTrojan.GenericKD.47015764
NANO-AntivirusTrojan.Win32.Stealer.jcfhkk
MicroWorld-eScanTrojan.GenericKD.47015764
Ad-AwareTrojan.GenericKD.47015764
SophosMal/Generic-S
McAfee-GW-EditionArtemis!Trojan
FireEyeTrojan.GenericKD.47015764
EmsisoftMalCert-S.LA (A)
MicrosoftTrojanSpy:MSIL/Redline.STA
GridinsoftTrojan.Kryptik.dd!c
GDataTrojan.GenericKD.47015764
McAfeeArtemis!7F7091B565E4
MAXmalware (ai score=80)
VBA32CIL.StupidPInvoker-1.Heur
MalwarebytesTrojan.MalPack.PNG
IkarusTrojan-Spy.MSIL.Redline
FortinetPossibleThreat.MU
AVGWin32:DangerousSig [Trj]
Paloaltogeneric.ml

How to remove MSIL/TrojanDownloader.Agent_AGen.I?

MSIL/TrojanDownloader.Agent_AGen.I removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment