Categories: Malware

About “MSIL:Agent-CWF [Trj]” infection

The MSIL:Agent-CWF [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL:Agent-CWF [Trj] virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine MSIL:Agent-CWF [Trj]?


File Info:
name: 5152D559D85E947A08D4.mlwpath: /opt/CAPEv2/storage/binaries/66bd869fa91f2ce6071e7ae3907d3a9672dcaf2e4499291524e225888d756739crc32: 8C03A275md5: 5152d559d85e947a08d40423363bf3e6sha1: 710207557e2ce3fa49b1cd296243f0d45adf0e11sha256: 66bd869fa91f2ce6071e7ae3907d3a9672dcaf2e4499291524e225888d756739sha512: 2e285b9493f0c9e3cfedb50a08e5f449e159485e24a7fcb676b0c8cd2efb5e417774199741ad6d10baaeed4fc8507ead8c405b8fd74422b91ffb34fa926a3506ssdeep: 96:Zuz4E254C2s4y2emZNYrhb0ouMWsWrvQ9TcE2NYlnlYJnLrL0KffvzBEGnv16cRt:Zui+mrqo5WFoGVQnlYJLrLTji7cDNtype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T1F8E1B81667F14275CE5B07772CB302411B73EA05CE67EB6F0888A3E5C9E31654A62E72sha3_384: 29cb31016f7dc4ade99e5e10e2d4e90949f6dac255d7fdfb5cb9a60d187221e0b20a75dd332a8cc0a44e57746d8e4ffcep_bytes: ff250020400000000000000000000000timestamp: 2023-02-16 01:21:39
Version Info:
Translation: 0x0000 0x04b0FileDescription:  FileVersion: 0.0.0.0InternalName: Mozilla.exeLegalCopyright:  OriginalFilename: Mozilla.exeProductVersion: 0.0.0.0Assembly Version: 0.0.0.0

MSIL:Agent-CWF [Trj] also known as:

Bkav	W32.FamVT.CerbuPKG.Trojan
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Barys.51606
FireEye	Generic.mg.5152d559d85e947a
CAT-QuickHeal	Trojan.Mogoogwi.A3
McAfee	Trojan-FMGK!5152D559D85E
Malwarebytes	Backdoor.Agent.MSIL
VIPRE	Gen:Variant.Barys.51606
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 004be57a1 )
Alibaba	Trojan:MSIL/Mogoogwi.556027b2
K7GW	Trojan ( 004be57a1 )
Cybereason	malicious.9d85e9
VirIT	Trojan.Win32.Generic.BAMF
Cyren	W32/S-f2a4b9c7!Eldorado
Symantec	Trojan Horse
ESET-NOD32	MSIL/Agent.QIF
APEX	Malicious
ClamAV	Win.Malware.Barys-6804071-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Barys.51606
NANO-Antivirus	Trojan.Win32.Agent.dzsvxi
SUPERAntiSpyware	Backdoor.Bot/Variant
Avast	MSIL:Agent-CWF [Trj]
Tencent	Trojan.MSIL.Agent.hk
TACHYON	Trojan/W32.DN-Agent.7168.AL
Sophos	Troj/MSIL-CWS
F-Secure	Trojan.TR/Mogoogwi.qifa
DrWeb	Trojan.Siggen7.31585
Zillya	Trojan.Agent.Win32.525695
TrendMicro	WORM_MOGOOGWI.SMHA
McAfee-GW-Edition	BehavesLike.Win32.Trojan.zt
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Barys.51606 (B)
Ikarus	Trojan-Dropper.MSIL
GData	Gen:Variant.Barys.51606
Jiangmin	Trojan.Generic01.a
Google	Detected
Avira	TR/Mogoogwi.qifa
Antiy-AVL	Trojan/MSIL.Mogoogwi
Xcitium	TrojWare.MSIL.Agent.QIF@6kzu82
Arcabit	Trojan.Barys.DC996
ViRobot	Trojan.Win32.Agent.7168.FI
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:MSIL/Mogoogwi.A
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Zusy.R154407
BitDefenderTheta	Gen:NN.ZemsilF.36250.am0@aeztyso
ALYac	Gen:Variant.Barys.51606
MAX	malware (ai score=100)
VBA32	TScope.Trojan.MSIL
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	WORM_MOGOOGWI.SMHA
Rising	Trojan.Mogoogwi!1.A1A3 (CLASSIC)
SentinelOne	Static AI – Malicious PE
Fortinet	MSIL/Agent.QIF!tr
AVG	MSIL:Agent-CWF [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)