Trojan-PSW.MSIL.Agensla.mkh removal

The Trojan-PSW.MSIL.Agensla.mkh is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-PSW.MSIL.Agensla.mkh virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Trojan-PSW.MSIL.Agensla.mkh?


File Info:
crc32: 73C01C38
md5: e1e56fa55f731ca6c53ce5aabda6fe1c
name: scan5645.exe
sha1: fd17af6f2f02ae3c5fc8fddd203e6db87f98861d
sha256: bbef17739e7d84233a887767b547feb65de6af49723e9ec2748be76a190bd69c
sha512: 6391068126730b01ea6835eb386f34ee70d9fc5f1414aedc204b5dac15c79c59cfaec5cce306daaf532c11de46d5c0d856be5db5c43b4a82139f64fc9dd7720b
ssdeep: 49152:ku0c++OCvkGs9FaUnkwANxVXR+Q27gNqzc7gY:jB3vkJ9NHARUQ27gN00g
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0809 0x04b0

Trojan-PSW.MSIL.Agensla.mkh also known as:

MicroWorld-eScan	Trojan.AutoIT.Agent.AAJ
Qihoo-360	Generic/HEUR/QVM10.2.878B.Malware.Gen
McAfee	Artemis!E1E56FA55F73
Cylance	Unsafe
K7AntiVirus	Trojan ( 005616071 )
BitDefender	Trojan.AutoIT.Agent.AAJ
K7GW	Trojan ( 005616071 )
Cybereason	malicious.f2f02a
Invincea	heuristic
F-Prot	W32/AutoIt.NS.gen!Eldorado
Avast	Script:SNH-gen [Trj]
GData	Trojan.AutoIT.Agent.AAJ
Kaspersky	Trojan-PSW.MSIL.Agensla.mkh
Alibaba	Trojan:Win32/autoit.ali2000008
NANO-Antivirus	Trojan.Win32.Agensla.hcpcuv
ViRobot	Trojan.Win32.Z.Autoit.2068480
AegisLab	Trojan.Multi.Generic.4!c
APEX	Malicious
Emsisoft	Trojan.AutoIT.Agent.AAJ (B)
F-Secure	Trojan.TR/Autoit.rlhkc
DrWeb	Trojan.PWS.Siggen2.44098
McAfee-GW-Edition	BehavesLike.Win32.Downloader.tc
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.e1e56fa55f731ca6
Sophos	Mal/Generic-S
Cyren	W32/AutoIt.NS.gen!Eldorado
Avira	TR/Autoit.rlhkc
MAX	malware (ai score=83)
Endgame	malicious (high confidence)
Arcabit	Trojan.AutoIT.Agent.AAJ
ZoneAlarm	Trojan-PSW.MSIL.Agensla.mkh
Microsoft	Trojan:Win32/Occamy.C
AhnLab-V3	Trojan/AU3.Wacatac.S1079
Malwarebytes	Trojan.MalPack.AutoIt
Panda	Trj/CI.A
ESET-NOD32	a variant of Win32/Injector.Autoit.FCX
Tencent	Msil.Trojan-qqpass.Qqrob.Akyn
Ikarus	Trojan.Autoit
eGambit	Unsafe.AI_Score_95%
Fortinet	AutoIt/Injector.EZG!tr
AVG	Script:SNH-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_60% (W)
MaxSecure	Trojan.Malware.300983.susgen

How to remove Trojan-PSW.MSIL.Agensla.mkh?

Trojan-PSW.MSIL.Agensla.mkh removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X