How to remove “MSIL/TrojanDownloader.Small.AOK”?

The MSIL/TrojanDownloader.Small.AOK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/TrojanDownloader.Small.AOK virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine MSIL/TrojanDownloader.Small.AOK?


File Info:
crc32: 60ADE563
md5: 08a9e02ef015a8e10c183f8afe030dda
name: 08A9E02EF015A8E10C183F8AFE030DDA.mlw
sha1: 20d229c8b4291c2ae3d48744a25c5f25b3411f9c
sha256: 5b6f8ea4c44af1b5e8dff236fd40af7f6719622262788a9ee2adc0e7b4be7332
sha512: b447f28423597e706bf4e3e33ed241bc1df3b767bb3149cc4bedb02da8a6ec3f59e192f47d071af26342f24069032c4389331732fb7d1d071157d6004867816b
ssdeep: 768:36duPTBkpu04G4W82XPtEyQ3bOHIZRy4:Ks904p2fm3bOHIZRF
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2017
Assembly Version: 1.0.0.0
InternalName: server clean.exe
FileVersion: 1.0.0.0
ProductName: server clean
ProductVersion: 1.0.0.0
FileDescription: server clean
OriginalFilename: server clean.exe

MSIL/TrojanDownloader.Small.AOK also known as:

MicroWorld-eScan	Trojan.GenericKD.5283611
FireEye	Generic.mg.08a9e02ef015a8e1
Qihoo-360	Win32/Trojan.3b3
ALYac	Trojan.GenericKD.5283611
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan-Downloader ( 004f2a781 )
BitDefender	Trojan.GenericKD.5283611
K7GW	Trojan-Downloader ( 004f2a781 )
Cybereason	malicious.ef015a
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Packed.Zusy-7730815-0
Kaspersky	Trojan.MSIL.Disfa.litu
NANO-Antivirus	Trojan.Win32.Disfa.eqavxg
AegisLab	Trojan.MSIL.Disfa.4!c
Ad-Aware	Trojan.GenericKD.5283611
Sophos	Mal/Generic-S
Comodo	TrojWare.MSIL.Dynamer.AS@7ewb3t
DrWeb	Trojan.PWS.Siggen1.28959
Zillya	Downloader.Small.Win32.104061
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Trojan.GenericKD.5283611 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1101240
MAX	malware (ai score=83)
Antiy-AVL	Trojan/MSIL.Disfa
Microsoft	Trojan:Win32/Dynamer!rfn
Arcabit	Trojan.Generic.D509F1B
ZoneAlarm	Trojan.MSIL.Disfa.litu
GData	Trojan.GenericKD.5283611
Cynet	Malicious (score: 85)
McAfee	Artemis!08A9E02EF015
Panda	Trj/GdSda.A
ESET-NOD32	a variant of MSIL/TrojanDownloader.Small.AOK
Rising	Downloader.Small!8.B41 (CLOUD)
Yandex	Trojan.Disfa!hQZ+oon9z0g
Ikarus	Trojan-Downloader.MSIL.Small
eGambit	Unsafe.AI_Score_99%
Fortinet	MSIL/Agent.CUA!tr.dldr
BitDefenderTheta	Gen:NN.ZemsilF.34804.cq0@aSra8Ag
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)
MaxSecure	Trojan.Malware.300983.susgen

How to remove MSIL/TrojanDownloader.Small.AOK?

MSIL/TrojanDownloader.Small.AOK removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X