Trojan.MSIL.Agent.CLQ (file analysis)

The Trojan.MSIL.Agent.CLQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.MSIL.Agent.CLQ virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.MSIL.Agent.CLQ?


File Info:
crc32: DEDDEE8A
md5: d692afdfb5d27cf52ddae0f91d1103ac
name: D692AFDFB5D27CF52DDAE0F91D1103AC.mlw
sha1: 6a57913dadbcc7dadec5bbd0983bd43f817c2221
sha256: 15aa0590ac5dc13c5f6f5ad90ec1a840be8c9959024bbdddaec8c47e60282c71
sha512: ec0fe0de8ca7b3c76a9f8d4817e210f239745659511a6688fc7df0901cd63b4e1276b814114caa44c65425f71a1ecb5499b11f63d408b3bdfd76d54317098d76
ssdeep: 1536:JF6qKuqvPlAcNq9jr5y345v2llAcNq9jr5y345v2/nM2YguoHQixQ4YN:JFFqvlNQ04VqNQ04VKnH7RQPN
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: xa9 A Company. All rights reserved.
InternalName: 
FileVersion: 1.0.0.0
CompanyName: A Company
ProductName: 
ProductVersion: 1.0.0.0
FileDescription: 
OriginalFilename: myfile.exe
Translation: 0x0409 0x04b0

Trojan.MSIL.Agent.CLQ also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.MSIL.Agent.CLQ
FireEye	Generic.mg.d692afdfb5d27cf5
CAT-QuickHeal	Trojan.GenericFC.S17873715
ALYac	Trojan.MSIL.Agent.CLQ
Malwarebytes	Backdoor.DarkComet
K7AntiVirus	Trojan ( 700000121 )
BitDefender	Trojan.MSIL.Agent.CLQ
K7GW	Trojan ( 700000121 )
CrowdStrike	win/malicious_confidence_100% (D)
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Malware.Msilperseus-6989564-0
Alibaba	Trojan:MSIL/Injector.64f7980f
NANO-Antivirus	Trojan.Win32.Disfa.eqldnd
Tencent	Malware.Win32.Gencirc.10b61181
Ad-Aware	Trojan.MSIL.Agent.CLQ
Emsisoft	Trojan.MSIL.Agent.CLQ (B)
Comodo	Malware@#2u43bnaqdoa7i
DrWeb	Trojan.DownLoader25.2687
Zillya	Trojan.Kryptik.Win32.1213946
TrendMicro	TROJ_KRYPTIK_GG3104FE.UVPM
Sophos	ML/PE-A + Mal/MSIL-SF
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Win32.AGeneric
AegisLab	Trojan.MSIL.Disfa.4!c
AhnLab-V3	Trojan/Win32.Crypt.C2018638
GData	Trojan.MSIL.Agent.CLQ
Cynet	Malicious (score: 100)
ESET-NOD32	a variant of MSIL/Injector.RSG
BitDefenderTheta	Gen:NN.ZemsilF.34804.hm2@ayWsRZni
MAX	malware (ai score=89)
VBA32	Backdoor.MSIL.SpyGate
TrendMicro-HouseCall	TROJ_KRYPTIK_GG3104FE.UVPM
Rising	Backdoor.Bladabindi!8.B1F (TFE:C:YmIuEDuurZF)
Yandex	Trojan.Revenge!CLiGAX/IqO4
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_95%
Fortinet	MSIL/Injector.CMQ!tr
Cybereason	malicious.fb5d27
Panda	Trj/CI.A
Qihoo-360	Win32/Sorter.AVE.DotNetFile.A

How to remove Trojan.MSIL.Agent.CLQ?

Trojan.MSIL.Agent.CLQ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X