Trojan

Trojan-PSW.MSIL.Agent.afmb removal

Malware Removal

The Trojan-PSW.MSIL.Agent.afmb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-PSW.MSIL.Agent.afmb virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Anomalous binary characteristics

Related domains:

www.bghbs.com

How to determine Trojan-PSW.MSIL.Agent.afmb?


File Info:

crc32: 776B14B1
md5: 0e6fc36190b743c631f2371a3e3a1dc1
name: upload_file
sha1: c8c81a74687db4d1fb358101597caf583f800f1c
sha256: 09fb20e86e4039c40b42a66e700c866e34d1f9d5f15c6a7006a2a0b3c5a770ef
sha512: 75bf8cbebf5fd1828ab86f5fa48433b59304cba91b3c009a76ed9b8c0566cdf0566182e75c2f14e1298e020a52c94ea21791f0e380831333d894e0ec395b9c28
ssdeep: 98304:49N4QzIV4yHKmiUnX6rXNsi5580Cakx2ee:49N4UIVjHxZnX6rf5HFkx25
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: www.ningos.com, 2006-2017
FileVersion: 4.15.0.1
CompanyName: www.ningos.cn
LegalTrademarks: ningos ImagesToPDF
Comments: Multiple image converted into PDF software, using free, unlimited distribution.
ProductName: x5b81x683cx601d ImagesToPDF
FileDescription: ningos ImagesToPDF Tool
Translation: 0x0804 0x03a8

Trojan-PSW.MSIL.Agent.afmb also known as:

MicroWorld-eScanTrojan.GenericKD.42982663
ALYacTrojan.GenericKD.42982663
CylanceUnsafe
AegisLabTrojan.MSIL.Agent.i!c
SangforMalware
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderTrojan.GenericKD.42982663
K7GWRiskware ( 0040eff71 )
ArcabitTrojan.Generic.D28FDD07
InvinceaMal/Generic-S
AvastWin32:Malware-gen
KasperskyTrojan-PSW.MSIL.Agent.afmb
AlibabaTrojanPSW:MSIL/muasi.32779b80
Ad-AwareTrojan.GenericKD.42982663
EmsisoftTrojan.GenericKD.42982663 (B)
ComodoMalware@#36ud0lklp3ge1
F-SecureTrojan.TR/PSW.Agent.muasi
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Dropper.wc
FireEyeTrojan.GenericKD.42982663
SophosMal/Generic-S
AviraTR/PSW.Agent.muasi
Antiy-AVLGrayWare[Downloader]/Win32.Adload.gen
MicrosoftTrojan:Win32/Ymacco.AA09
ZoneAlarmTrojan-PSW.MSIL.Agent.afmb
GDataTrojan.GenericKD.42982663
McAfeeArtemis!0E6FC36190B7
VBA32TrojanPSW.MSIL.Agent
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002H0CIR20
AVGWin32:Malware-gen
Cybereasonmalicious.4687db

How to remove Trojan-PSW.MSIL.Agent.afmb?

Trojan-PSW.MSIL.Agent.afmb removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment