Categories: Malware

Should I remove “Downloader.Win32.Agent.ltdk”?

The Downloader.Win32.Agent.ltdk is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Downloader.Win32.Agent.ltdk virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Downloader.Win32.Agent.ltdk?


File Info:
name: A17B3723A6AE1184C59D.mlwpath: /opt/CAPEv2/storage/binaries/6eca7f2fb8c0bc80eec44e8bbab63ec3b4ccc10ee455edf3f7ff86d13a87252dcrc32: 13C88D4Dmd5: a17b3723a6ae1184c59d85d42dea2751sha1: c4f8f4f2f1bb79a15198a2bc367057d5e5b89e2csha256: 6eca7f2fb8c0bc80eec44e8bbab63ec3b4ccc10ee455edf3f7ff86d13a87252dsha512: 8110c3819ed96c4ccb7491c52359536c12c1a97cf06016b3e1f389e4eaf48840d4f507fee62a92c0ff941cc54d28c3f7918b818c0d5a3524479ec12ee522f42assdeep: 12288:1l2D2hO/z0NQca4pEl5GSi769v7vR53MH2X+9:1l26Oz2JzK77i70v7vR53MH79type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T131F49D42F58240F5D655183095E67775FB3ABE060F09CA83DB98FE2C5E332819D362BAsha3_384: 76c89fa62ae89c2559e38fcb3dbb64f9765d963a608b22404d16c64679dc77c416963101e0caeaf88a887a39cf41f751ep_bytes: 558bec6aff6828c64800683456460064timestamp: 2018-10-25 03:26:05
Version Info:
FileVersion: 1.0.0.0FileDescription: 自动更新程序ProductName: 自动更新程序ProductVersion: 1.0.0.0CompanyName: 自动更新程序LegalCopyright: 自动更新程序 版权所有Comments: 自动更新程序Translation: 0x0804 0x04b0

Downloader.Win32.Agent.ltdk also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Generic.lpDo
Elastic	malicious (high confidence)
FireEye	Generic.mg.a17b3723a6ae1184
Cylance	Unsafe
Sangfor	PUP.Win32.Agent.ltdk
K7AntiVirus	Trojan ( 005246d51 )
Alibaba	Trojan:Win32/Occamy.7d1963cb
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.2f1bb7
BitDefenderTheta	Gen:NN.ZexaF.34114.Vq0@amF1NXpb
Cyren	W32/Agent.EW.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
TrendMicro-HouseCall	TROJ_GEN.R002C0DKT21
Paloalto	generic.ml
Kaspersky	not-a-virus:Downloader.Win32.Agent.ltdk
NANO-Antivirus	Trojan.Win32.ChinDowl.hcbhgo
Avast	Win32:Malware-gen
Sophos	Generic PUA ME (PUA)
Comodo	Worm.Win32.Dropper.RA@1qraug
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0DKT21
McAfee-GW-Edition	BehavesLike.Win32.Generic.bh
Ikarus	Trojan.Win32.Disabler
GData	Win32.Trojan.PSE.183RH9S
Jiangmin	Downloader.ChinDowl.aa
Webroot	W32.Trojan.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.29070EA
Gridinsoft	Ransom.Win32.Occamy.sa
Microsoft	Trojan:Win32/Occamy.C
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.C2839870
McAfee	GenericRXAA-AA!A17B3723A6AE
MAX	malware (ai score=100)
VBA32	Downloader.ChinDowl
Malwarebytes	Trojan.MalPack.FlyStudio
APEX	Malicious
Rising	Trojan.Generic@ML.95 (RDML:61ZcS9e6X5DlpO1wraiduw)
Yandex	Trojan.GenAsa!mLFi6V2e11s
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.9064818.susgen
Fortinet	Riskware/Application
AVG	Win32:Malware-gen
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_90% (D)