Categories: Trojan

Trojan-PSW.MSIL.Agent.amzd removal

The Trojan-PSW.MSIL.Agent.amzd is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-PSW.MSIL.Agent.amzd virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • Authenticode signature is invalid
  • Created a process from a suspicious location
  • Anomalous binary characteristics

How to determine Trojan-PSW.MSIL.Agent.amzd?


File Info:

name: D83FFEFC0F0E61405961.mlwpath: /opt/CAPEv2/storage/binaries/4897e68e2dfb841b90a87fd078b5cf3dd2cbacb5edf8a6376fd19cbf234bb827crc32: FD7FFB84md5: d83ffefc0f0e61405961c9cbdf4bfc15sha1: f0dacd0d901245f12f83dc2ba5b161f1a3c3f65dsha256: 4897e68e2dfb841b90a87fd078b5cf3dd2cbacb5edf8a6376fd19cbf234bb827sha512: 874bf728d165f1470eda234215202ff7f1bda1c02f2ae6703c2b6dd398b6c306359f069418004fa004f598d56efbad84d8c21e9e867658e9ddca348bcee9054assdeep: 98304:EFUbfPE/IhcHBJcFe8ntj8lX33FVwsKc5uSw9FJXnTneCkLo4fTP:BwF/cU8nt0X33FVwsKIIFJXnzgrtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1622633E05FF0A472F42A2031F4D0B17CBEE2FD299935491AEB8BEA5939710C65568F07sha3_384: bc92dea4a966f4d8d57ab129d271acce241b6ff6bf763daf2286f10f423e4fdabd3677641aa6e7590823dcb95e64e22aep_bytes: e885630000e978feffff8bff558bec56timestamp: 2015-02-15 08:00:31

Version Info:

FileDescription: ConjecturablenessInternalName: DownsittingOriginalFilename: LuebberingCompanyName: UnmeasurabilityLegalCopyright: PrimitivesProductName: GenitofemoralFileVersion: 9.0.4.9ProductVersion: 9.0.4.9Comments: HeavyweightLegalTrademarks: LudwigsburgTitle: ChrysalidalAssembly Version: 9.0.4.9Translation: 0x0409 0x04b0

Trojan-PSW.MSIL.Agent.amzd also known as:

Bkav W32.AIDetect.malware2
Lionic Trojan.MSIL.Reline.i!c
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.47613703
FireEye Trojan.GenericKD.47613703
CAT-QuickHeal Trojanpws.Msil
McAfee Artemis!D83FFEFC0F0E
Cylance Unsafe
Zillya Trojan.Agent.Win32.2594447
Sangfor Infostealer.MSIL.Reline.gen
K7AntiVirus Trojan ( 0058a6541 )
Alibaba TrojanPSW:MSIL/StealerPacker.34e49bd2
K7GW Trojan ( 0058a6541 )
Cyren W32/MSIL_Troj.BUC.gen!Eldorado
ESET-NOD32 multiple detections
TrendMicro-HouseCall TROJ_GE.014FDD9E
Paloalto generic.ml
Cynet Malicious (score: 100)
Kaspersky Trojan-PSW.MSIL.Agent.amzd
BitDefender Trojan.GenericKD.47613703
Avast Win64:TrojanX-gen [Trj]
Tencent Msil.Trojan-qqpass.Qqrob.Wqmx
Ad-Aware Trojan.GenericKD.47613703
Emsisoft Trojan.GenericKD.47613703 (B)
TrendMicro TROJ_GEN.R002C0PLC21
Sophos Mal/Generic-S
Ikarus Trojan.MSIL.Agent
GData MSIL.Trojan.BSE.BU8T2F
Avira TR/AD.Inject.pvown
Gridinsoft Ransom.Win32.Sabsik.sa
ViRobot Trojan.Win32.Z.Sabsik.4639431
Microsoft Trojan:Win32/Tiggre!rfn
SentinelOne Static AI – Malicious SFX
AhnLab-V3 Trojan/Win.Generic.R456268
VBA32 TScope.Trojan.MSIL
ALYac Trojan.GenericKD.47613703
Malwarebytes Trojan.Agent.Gen
APEX Malicious
MAX malware (ai score=99)
Fortinet MSIL/Agent.UYN!tr
AVG Win64:TrojanX-gen [Trj]
Panda Trj/CI.A

How to remove Trojan-PSW.MSIL.Agent.amzd?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Worm.VobfusVMF.S19740081 information

The Worm.VobfusVMF.S19740081 is considered dangerous by lots of security experts. When this infection is active,…

4 mins ago

Malware.AI.986323659 removal guide

The Malware.AI.986323659 is considered dangerous by lots of security experts. When this infection is active,…

15 mins ago

Generic.Dacic.1636.DB5B5110 removal

The Generic.Dacic.1636.DB5B5110 is considered dangerous by lots of security experts. When this infection is active,…

20 mins ago

Application.Application.Graftor.406603 (B) (file analysis)

The Application.Application.Graftor.406603 (B) is considered dangerous by lots of security experts. When this infection is…

29 mins ago

Generic.Dacic.1A7FA519.A.F5972732 removal instruction

The Generic.Dacic.1A7FA519.A.F5972732 is considered dangerous by lots of security experts. When this infection is active,…

40 mins ago

What is “Win32/AutoRun.VB.APK”?

The Win32/AutoRun.VB.APK is considered dangerous by lots of security experts. When this infection is active,…

40 mins ago