Jump to content


Recommended Posts


I would like to ask for your help and comments.

I often get notifications that Backdoor.Agent.MSIL was quarantined on some of PCs in my company. With 2 PCs it happens every day, with the rest less often. I checked these computers with SCCM endpoint, Malwarebytes Endpoint - both found no issues, cleared cache in all web browsers and temp files but I still get a same warning, also checked file server which these PCs are connected to. Please, could you advise where to look for a reason of that? Is this false positive warning or there is really a backdoor found and blocked by malwarebytes Endpoint while opening files or browsing internet?

Thank you in advance.


Warning message:

Notification Catalog: Client


Malware threat detected, see details below:

2016-09-22 09:05:46       xsxxxxxxx016      10.35.xxx.xxx      Backdoor.Agent.MSIL    Quarantined                C:\Users\xxxxxxxxx\AppData\Local\Temp\.tmp

Total count: 1.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.