Categories: Malware

Downloader.Win32.Agent.lcwm removal

The Downloader.Win32.Agent.lcwm is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Downloader.Win32.Agent.lcwm virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Anomalous binary characteristics

Related domains:

dpd.securestudies.com

How to determine Downloader.Win32.Agent.lcwm?


File Info:
crc32: 58A1933Dmd5: 838c25d9a3b0f60ebdca1f211dce1f41name: mp3cutterjoiner-12.6.exesha1: 890402f85306a1486a791d445b38410c56c18602sha256: d38a2905396e627792d5fc44a86bdb05b03444854b81288d1b820fc5564c7793sha512: ab6383f98219f6154c43471c26c8ef68c1cd7b357a90c979f55e0689f7ad536481781ca26bd6112671fc62dc593bfbd3fc383afa6ad2f11d8f2a34328aa13bc4ssdeep: 98304:E18X9V6TI+ZTlrdstgWISmXGQO/cMmZJyOYQomdFqKVTryT6dxpV9u1O:6Y9V65BrSayE6OyJGqK9rDxpVMotype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright 2019 Do2019.com                                                                           FileVersion:                     CompanyName:                                                             Comments: This installation was built with Inno Setup.ProductName: MP3x526ax5207x5408x5e76x5927x5e08                                                   ProductVersion: 12.6                                              FileDescription: MP3x526ax5207x5408x5e76x5927x5e08 Setup                                             Translation: 0x0000 0x04b0

Downloader.Win32.Agent.lcwm also known as:

DrWeb	Adware.Relevant.178
McAfee	Artemis!838C25D9A3B0
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Riskware.Win32.Agent.1!c
TrendMicro	TROJ_GEN.R002C0OK819
Cyren	W32/Application.VUQQ-8254
Avast	Win32:Adware-gen [Adw]
GData	Win32.Application.Agent.MNR67Y
Kaspersky	not-a-virus:Downloader.Win32.Agent.lcwm
Alibaba	Downloader:Win32/DeFile.ad2b1a07
NANO-Antivirus	Riskware.Win32.Relevant.foobcq
Sophos	Generic PUA MC (PUA)
Comodo	Malware@#3onvg7uuxeknn
F-Secure	Adware.ADWARE/Relevant.clltb
McAfee-GW-Edition	BehavesLike.Win32.AdwareFileTour.rc
Ikarus	PUA.DeFile
Webroot	W32.Adware.Gen
Avira	ADWARE/Relevant.clltb
ZoneAlarm	not-a-virus:Downloader.Win32.Agent.lcwm
Microsoft	Trojan:Win32/Bitrep.B
AhnLab-V3	Pup/Win32.RL_Generic.R266554
VBA32	Adware.Relevant
MAX	malware (ai score=100)
Panda	Trj/CI.A
ESET-NOD32	Win32/DeFile.Gen potentially unwanted
TrendMicro-HouseCall	TROJ_GEN.R002C0OK819
Fortinet	W32/DeFile
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml
MaxSecure	Trojan.Malware.74282391.susgen