Malware

Should I remove “Application.Agent.DWJ”?

Malware Removal

The Application.Agent.DWJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Application.Agent.DWJ virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Russian
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid

How to determine Application.Agent.DWJ?


File Info:

name: 4104C497D7701022EF94.mlw
path: /opt/CAPEv2/storage/binaries/872368b44f8309f5b30e2db8df4759ba81e3d0beafdbb4d16105dc5c82190b44
crc32: 290F53EE
md5: 4104c497d7701022ef94a15d0349f2e3
sha1: 2604bbe4971791fe0c391e4f375601f0b9fc49c5
sha256: 872368b44f8309f5b30e2db8df4759ba81e3d0beafdbb4d16105dc5c82190b44
sha512: c7818cd2b73e97d7234179b12925091a258ef553d3a87846200091f53663f514d48d96218482d7dcc301b571fcba0eddded3b52fd3eccd0f40c5dff8346493a7
ssdeep: 49152:CCkuO7N6iztqxPDHWOAvokZaXcZhsBMCb5tPd70svNISuQf7:bh2ztq7woKaXisBMutesvNKQf7
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A4B5DF577B978A56C02EC430494ACDA4DF646FCC7A11B81F3248F7DAA43F1F47A82698
sha3_384: ab2ea69de9aa8485f5f58a9aece157ebea09909a7f740971fdc03617ca23a093186f02bac44e40adc03353afcca62067
ep_bytes: 60be00105c008dbe0000e4ff5789e58d
timestamp: 2012-07-19 12:28:42

Version Info:

0: [No Data]

Application.Agent.DWJ also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanApplication.Agent.DWJ
FireEyeGeneric.mg.4104c497d7701022
SangforTrojan.Win32.Save.a
K7AntiVirusUnwanted-Program ( 004d554c1 )
K7GWUnwanted-Program ( 004d554c1 )
Cybereasonmalicious.7d7701
CyrenW32/Trojan.IQE.gen!Eldorado
SymantecSMG.Heur!gen
ESET-NOD32a variant of Win32/GameTool.DI potentially unsafe
CynetMalicious (score: 100)
BitDefenderApplication.Agent.DWJ
NANO-AntivirusRiskware.Win32.Toolbar.djjyko
EmsisoftApplication.Toolbar (A)
F-SecureHeuristic.HEUR/AGEN.1332717
VIPREApplication.Agent.DWJ
Trapminemalicious.high.ml.score
SophosGeneric Reputation PUA (PUA)
SentinelOneStatic AI – Suspicious PE
GDataApplication.Agent.DWJ
AviraHEUR/AGEN.1332717
ArcabitApplication.Agent.DWJ
GoogleDetected
AhnLab-V3Unwanted/Win32.GameTool.R265822
VBA32BScope.Trojan.Tiggre
ALYacApplication.Agent.DWJ
MAXmalware (ai score=79)
MalwarebytesGeneric.Malware.AI.DDS
RisingTrojan.Win32.Generic.1901BB72 (C64:YzY0OpQ2CX080KQ8)
FortinetRiskware/GameTool
CrowdStrikewin/grayware_confidence_90% (D)

How to remove Application.Agent.DWJ?

Application.Agent.DWJ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment