Spy Trojan

TrojanSpy:MSIL/SmallAgent.SBR!MSR malicious file

Malware Removal

The TrojanSpy:MSIL/SmallAgent.SBR!MSR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanSpy:MSIL/SmallAgent.SBR!MSR virus can do?

  • Authenticode signature is invalid
  • CAPE detected the RedLine malware family

How to determine TrojanSpy:MSIL/SmallAgent.SBR!MSR?


File Info:

name: 01C80D4E4AEEE0CD6FE7.mlw
path: /opt/CAPEv2/storage/binaries/70834239f0b136a3f8adeb56266cfee70bff5acd46f048622f498d1223376661
crc32: 9FB4F27C
md5: 01c80d4e4aeee0cd6fe7c6e1a5d9a0d8
sha1: 18c4583f5e84203a2c9756740687bff56e7ae58f
sha256: 70834239f0b136a3f8adeb56266cfee70bff5acd46f048622f498d1223376661
sha512: 56ef32d34d00f636111d3c7cc7fe03adddc633e7e7b9ba9f2a28192cb56005592ad227e15d656031322b06598620df06222ddeff79aff84112ce7fc02733b411
ssdeep: 192:yMsGPY82gQv5F4Ot2eMZZ3793Vnjdwvzi3Tpj:Y82l4Ot2eM1FnhwvGjp
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D6121719A388D371CCBB1B71ECF393808230A74040A7DAAF56D9890B6DF3B4496926F4
sha3_384: af91757af97fc82c70a835ec758abee0d108471773f7b533c64b9fac50fdc4f10c3dcd3217e89a359ba3951de799de91
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-02-07 05:02:27

Version Info:

Translation: 0x0000 0x04b0
Comments: fGotERSJblgofT
CompanyName: EMQYZPJuNdZMa
FileDescription: PrBFLYrlJwZqf
FileVersion: 1.0.0.0
InternalName: Fenestella.exe
LegalCopyright: wMYFjJYLVvsfZqG
LegalTrademarks: bZMWTkpIicmiDTyt
OriginalFilename: Fenestella.exe
ProductName: IETDeeZaUFQOdrW
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

TrojanSpy:MSIL/SmallAgent.SBR!MSR also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.MSIL.Agent.4!c
tehtrisGeneric.Malware
DrWebTrojan.DownLoader36.36404
MicroWorld-eScanTrojan.GenericKDZ.73328
SkyhighBehavesLike.Win32.Generic.zt
McAfeeGenericRXNK-BV!01C80D4E4AEE
Cylanceunsafe
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 00576c111 )
AlibabaTrojan:Win32/SmallAgent.3b3
K7GWTrojan ( 00576c111 )
ArcabitTrojan.Generic.D11E70
BitDefenderThetaGen:NN.ZemsilF.36680.am0@aqUZqVk
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of MSIL/Agent.TZL
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Malware.Msilkrypt-9839010-0
KasperskyHEUR:Trojan.MSIL.Agent.gen
BitDefenderTrojan.GenericKDZ.73328
SUPERAntiSpywareBackdoor.BlackSpider/Variant
AvastWin32:MalwareX-gen [Trj]
TencentTrojan.Win32.Agent.yhq
EmsisoftTrojan.GenericKDZ.73328 (B)
F-SecureHeuristic.HEUR/AGEN.1306570
VIPRETrojan.GenericKDZ.73328
TrendMicroTrojan.MSIL.USICE.SMJCDP2
SophosTroj/MSIL-PNC
IkarusTrojan-Downloader.MSIL.Agent
VaristW32/MSIL_Troj.AHV.gen!Eldorado
AviraHEUR/AGEN.1306570
Antiy-AVLTrojan/MSIL.Agent.tzl
MicrosoftTrojanSpy:MSIL/SmallAgent.SBR!MSR
ZoneAlarmHEUR:Trojan.MSIL.Agent.gen
GDataMSIL.Trojan.Agent.AXW
GoogleDetected
AhnLab-V3Malware/Win32.RL_Generic.R363865
VBA32Trojan.MSIL.Krypt
MalwarebytesGeneric.Malware/Suspicious
PandaTrj/GdSda.A
RisingTrojan.Agent!1.D274 (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/SmallAgent.A!tr
AVGWin32:MalwareX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove TrojanSpy:MSIL/SmallAgent.SBR!MSR?

TrojanSpy:MSIL/SmallAgent.SBR!MSR removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment