Backdoor.Win32.Agent.dpkw removal

The Backdoor.Win32.Agent.dpkw is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Backdoor.Win32.Agent.dpkw virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
CAPE detected the IAmTheKing malware family

How to determine Backdoor.Win32.Agent.dpkw?


File Info:
name: 738B56C23870E1165B55.mlw
path: /opt/CAPEv2/storage/binaries/3e768efab7a2af7c811c22f5b29656a73f5f14b56025571f031f74abe20687ab
crc32: 4DF96171
md5: 738b56c23870e1165b5517a70758bf5d
sha1: ebf01abd72e91a1c9875d4b82cb1ab85e95fb17b
sha256: 3e768efab7a2af7c811c22f5b29656a73f5f14b56025571f031f74abe20687ab
sha512: 6b21448799ddaf2ee2a4488be9f35ea3dde4f96ff749e21b2ea9f88436435959e4cfd16142698bd15ba779f0152a6217b57f10966233d757e3650ac8ad336a95
ssdeep: 1536:NjglTsvmW5LQR81c+RIIT/wy1RgqTRoHYLoWFu+B:cAeWg81cCx1W0RoHGoW8
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T197831A0869E0CCA3E2E1C07619634B3DBD277E220E9297A7F360D95E5C38A59853D37D
sha3_384: c2736b0ce5821e76175885d3d8d88b2af16597410d132909d1bbd3415d55c7af7744645a0f09816564f510abf1f33a42
ep_bytes: 558bec6aff68b8c1400068246d400064
timestamp: 2017-05-24 23:35:20

Version Info:
0: [No Data]

Backdoor.Win32.Agent.dpkw also known as:

Bkav	W32.AIDetect.malware1
FireEye	Generic.mg.738b56c23870e116
CAT-QuickHeal	Trojan.MauvaiseRI.S5251128
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Small.NNQ
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Backdoor.Win32.Agent.dpkw
NANO-Antivirus	Trojan.Win32.Zusy.esgnnl
Sophos	ML/PE-A
DrWeb	BackDoor.Siggen2.3293
McAfee-GW-Edition	BehavesLike.Win32.Generic.mm
Trapmine	malicious.high.ml.score
SentinelOne	Static AI – Suspicious PE
ZoneAlarm	Backdoor.Win32.Agent.dpkw
Microsoft	Trojan:Win32/Sabsik.EN.D!ml
Google	Detected
McAfee	GenericRXAA-AA!738B56C23870
Malwarebytes	Malware.Heuristic.1001
Rising	Trojan.Small!8.A9 (TFE:5:TEqWDyaa8eI)
Yandex	Trojan.GenAsa!9Jsz+c8BFaU
Ikarus	Trojan.Win32.Korplug
MaxSecure	Trojan.Malware.300983.susgen
Cybereason	malicious.d72e91

How to remove Backdoor.Win32.Agent.dpkw?

Backdoor.Win32.Agent.dpkw removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X