Trojan-PSW.MSIL.Agensla.ivs (file analysis)

The Trojan-PSW.MSIL.Agensla.ivs is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-PSW.MSIL.Agensla.ivs virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Chinese (Traditional)
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan-PSW.MSIL.Agensla.ivs?


File Info:
crc32: FE2DB43B
md5: 63aee9db4763921c8b1cb89289904d76
name: frgoso.exe
sha1: 5b9bfa95f948559cc38b25dfb07624018191a00f
sha256: 23da810306723ef9991bb52dca9582bb88a3b95ee5f69335fadad752752ae9b7
sha512: 6f202cba702682c0cd9d563a139b41dead527e0c2eebe2d6ea01080edc999e122ca9036da3177eaf33e29ecaca0b9c34eaa3c6ffea10ade23f099b4d5c91e882
ssdeep: 1536:kOL39lVno42ES4lfqvfF9lVno42ESqLO:hLNDnfZS4yf/DnfZSqC
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0404 0x04b0
InternalName: Chromidi2
FileVersion: 1.00
CompanyName: arbejd
ProductName: Eghjor5
ProductVersion: 1.00
OriginalFilename: Chromidi2.exe

Trojan-PSW.MSIL.Agensla.ivs also known as:

DrWeb	Trojan.DownLoader32.47670
MicroWorld-eScan	Trojan.GenericKD.42245878
FireEye	Trojan.GenericKD.42245878
McAfee	RDN/Generic.dx
ALYac	Spyware.AgentTesla
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 0055ebbe1 )
BitDefender	Trojan.GenericKD.42245878
K7GW	Trojan ( 0055ebbe1 )
BitDefenderTheta	Gen:NN.ZevbaF.34082.hm0@a0lLRaeb
F-Prot	W32/Kryptik.AYI.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Trojan-gen
GData	Trojan.GenericKD.42245878
Kaspersky	Trojan-PSW.MSIL.Agensla.ivs
Alibaba	Trojan:Win32/Injector.3d1de7f2
Rising	Trojan.Injector!8.C4 (CLOUD)
Sophos	Mal/FareitVB-X
McAfee-GW-Edition	BehavesLike.Win32.Trojan.cm
Trapmine	malicious.moderate.ml.score
Emsisoft	Trojan.Injector (A)
Cyren	W32/Kryptik.AYI.gen!Eldorado
Arcabit	Trojan.Generic.D2849EF6
ZoneAlarm	Trojan-PSW.MSIL.Agensla.ivs
Microsoft	Trojan:Win32/Wacatac.C!ml
Ad-Aware	Trojan.GenericKD.42245878
Malwarebytes	Trojan.MalPack.VB
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Injector.EJWP
Ikarus	Trojan.VB.Crypt
Fortinet	W32/Injector.EJST!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_80% (W)

How to remove Trojan-PSW.MSIL.Agensla.ivs?

Trojan-PSW.MSIL.Agensla.ivs removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan-PSW.MSIL.Agensla.ivs (file analysis)