How to remove "Trojan-PSW.MSIL.Agensla.llw"?

The Trojan-PSW.MSIL.Agensla.llw is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-PSW.MSIL.Agensla.llw virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
The binary likely contains encrypted or compressed data.
Attempts to remove evidence of file being downloaded from the Internet
Attempts to repeatedly call a single API many times in order to delay analysis time
Steals private information from local Internet browsers
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs
Checks the CPU name from registry, possibly for anti-virtualization
Harvests credentials from local FTP client softwares
Harvests information related to installed mail clients
Collects information to fingerprint the system

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan-PSW.MSIL.Agensla.llw?


File Info:
crc32: 7266C7A7
md5: 7d1c439b3037a140ecf2af8aa667b42c
name: kelly.exe
sha1: 293b1609fb3217edf74cdf8cf32c004aecd62c51
sha256: bbfc7cdf2a5b976958784602790c76d062824b8a2d3b39ac34615496ca273885
sha512: fe7e3992d7121ee67d28177b4bc9d44bbe255a6f9dddacecce1fc154e2ccd27ecac47b1a8a2569fb962e615da4e125cba2858b2876a07dfd3164ea575fce3572
ssdeep: 24576:EAHnh+eWsN3skA4RV1Hom2KXSmdaKur16gGz9k2GVyxjUDet/ZPJ+61MzSz5:Th+ZkldoPKi2aKurQdJ2JDY/Ce
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0809 0x04b0

Trojan-PSW.MSIL.Agensla.llw also known as:

MicroWorld-eScan	Trojan.GenericKD.33224838
FireEye	Generic.mg.7d1c439b3037a140
McAfee	Artemis!7D1C439B3037
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 005604821 )
BitDefender	Trojan.GenericKD.33224838
K7GW	Trojan ( 005604821 )
Cybereason	malicious.9fb321
Arcabit	Trojan.AutoIT.Agent.AAJ
Invincea	heuristic
Cyren	W32/AutoIt.LN.gen!Eldorado
ESET-NOD32	a variant of Win32/Injector.Autoit.FBP
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan-PSW.MSIL.Agensla.llw
Alibaba	Trojan:Win32/autoit.ali2000008
ViRobot	Trojan.Win32.S.Infostealer.1537536
Avast	Script:SNH-gen [Trj]
Rising	Trojan.Obfus/Autoit!1.C045 (CLASSIC)
Endgame	malicious (high confidence)
Emsisoft	Trojan.GenericKD.33224838 (B)
F-Secure	Trojan.TR/Autoit.eqtwy
DrWeb	Trojan.Inject3.34653
MaxSecure	Trojan.Malware.300983.susgen
TrendMicro	TROJ_GEN.R002C0DBB20
McAfee-GW-Edition	BehavesLike.Win32.Downloader.tc
Fortinet	AutoIt/Injector.EZY!tr
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
F-Prot	W32/AutoIt.LN.gen!Eldorado
Avira	TR/Autoit.eqtwy
MAX	malware (ai score=100)
Microsoft	Trojan:Win32/Predator.BC!MTB
ZoneAlarm	Trojan-PSW.MSIL.Agensla.llw
AhnLab-V3	Trojan/AU3.Wacatac.S1079
Acronis	suspicious
TACHYON	Trojan-PWS/W32.AgentTesla.1537536.B
Ad-Aware	Trojan.GenericKD.33224838
TrendMicro-HouseCall	TROJ_GEN.R002C0DBB20
Tencent	Msil.Trojan-qqpass.Qqrob.Ahyq
Yandex	Trojan.AvsArher.bS9LKk
Ikarus	Trojan-Spy.Keylogger.AgentTesla
eGambit	Unsafe.AI_Score_99%
GData	Trojan.GenericKD.33224838
AVG	Script:SNH-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Generic/Trojan.PSW.881

How to remove Trojan-PSW.MSIL.Agensla.llw?

Trojan-PSW.MSIL.Agensla.llw removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

How to remove “Trojan-PSW.MSIL.Agensla.llw”?