How to remove “Trojanpws.Msil”?

The Trojanpws.Msil is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What Trojanpws.Msil virus can do?

How to determine Trojanpws.Msil?


File Info:
crc32: E90BB5B1
md5: f621f2a3658734b3e38758077c61ac18
name: fr.exe
sha1: a88a3f6cdc9e7bbceedb5d03b322ce3f8567d4ad
sha256: b37fd6f625c652598d1784e0234832cabea26440555f580ff6743fad2790b4ab
sha512: 5486234ea7d9f281084ba7a8e8702929e38e68d17a3fd13216aa97c72a1374df085235439abac6c5825c5ac70e762a5d5e2923609276d59b4ac98a7c0af3bc23
ssdeep: 6144:36Tc1f06ITqLN+HvrDEvkj0r+fj0IbYQKI4Jr/BxGb:3J1fHXZ+Hvvtor+fj0zbJ
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 0.0.0.0
InternalName: PfoerXKtmwcxHGCcvAMHQJMyDxZWn.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:  
OriginalFilename: PfoerXKtmwcxHGCcvAMHQJMyDxZWn.exe

Trojanpws.Msil also known as:

MicroWorld-eScan	Gen:Variant.Razy.577898
FireEye	Generic.mg.f621f2a3658734b3
CAT-QuickHeal	Trojanpws.Msil
McAfee	RDN/Generic PWS.y
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Spyware ( 004bf53c1 )
BitDefender	Gen:Variant.Razy.577898
K7GW	Spyware ( 004bf53c1 )
Cybereason	malicious.cdc9e7
Invincea	heuristic
BitDefenderTheta	Gen:NN.ZemsilF.32253.tm0@aC0eTvo
F-Prot	W32/Azorult.D.gen!Eldorado
Symantec	Trojan Horse
ESET-NOD32	a variant of MSIL/Spy.Agent.AES
TrendMicro-HouseCall	TROJ_GEN.R002C0DKB19
Paloalto	generic.ml
GData	Gen:Variant.Razy.577898
Kaspersky	HEUR:Trojan-PSW.MSIL.Agensla.gen
Alibaba	Backdoor:MSIL/Remcos.0a681882
NANO-Antivirus	Trojan.Win32.Agensla.ghdheo
ViRobot	Trojan.Win32.Z.Razy.313344.B
Rising	Spyware.AgentTesla!1.B864 (CLASSIC)
Endgame	malicious (high confidence)
Comodo	Malware@#tet1dtgbx2m0
F-Secure	Trojan.TR/Dropper.Gen
DrWeb	Trojan.PWS.Siggen2.38386
TrendMicro	TROJ_GEN.R002C0DKB19
McAfee-GW-Edition	BehavesLike.Win32.Generic.fh
SentinelOne	DFI – Malicious PE
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
APEX	Malicious
Cyren	W32/Azorult.D.gen!Eldorado
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan[PSW]/MSIL.Agensla
Microsoft	Backdoor:MSIL/Remcos!MTB
Arcabit	Trojan.Razy.D8D16A
AhnLab-V3	Trojan/Win32.AgentTesla.C3468286
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Agensla.gen
ALYac	Spyware.AgentTesla
MAX	malware (ai score=100)
Ad-Aware	Gen:Variant.Razy.577898
Malwarebytes	Spyware.AgentTesla
Panda	Generic Malware
Ikarus	Trojan.MSIL.Spy
Fortinet	MSIL/Agensla.AES!tr.pws
AVG	Win32:PWSX-gen [Trj]
Avast	Win32:PWSX-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Win32/Trojan.PSW.374

How to remove Trojanpws.Msil?

Trojanpws.Msil removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X