Malware

Downloader.Win32.Agent.miaf removal

Malware Removal

The Downloader.Win32.Agent.miaf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Downloader.Win32.Agent.miaf virus can do?

  • Attempts to connect to a dead IP:Port (2 unique times)
  • Presents an Authenticode digital signature
  • Performs some HTTP requests
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.

Related domains:

downloader.downerapi.com
static.downerapi.com

How to determine Downloader.Win32.Agent.miaf?


File Info:

crc32: 8DCBF9E9
md5: 11ce923fdfb0de4706bd60304da87b92
name: ___13_____1.09___
sha1: 4f058675064a44eb45e8374881d76cf5f3005602
sha256: 6a58e9ed0015b48bedbf28ed28a9cf39de4cf59007342e32354be49839044ec9
sha512: ef0dbcc5245ad801f7396b13adee36ad9ebd2fc8b5c225290a2e2eb0b0166d38c2f52fa748f651fdafd7befcb8e807b60cd775199941c7c7890366354da2536e
ssdeep: 24576:kkU5KIE4WF9uvXULylVFX6Dn7XDNPRC0Ob9aGSnBPtBtds:kkUAIEw/sycDnrTAb9aGSnBPtjds
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2018
InternalName: FastDownloader.exe
FileVersion: 3.2.0.8
CompanyName: -
ProductName: x8f6fx4ef6x4e0bx8f7dx5668
ProductVersion: 3.2.0.8
FileDescription: x8f6fx4ef6x4e0bx8f7dx5668
OriginalFilename: FastDownloader.exe
Translation: 0x0804 0x04b0

Downloader.Win32.Agent.miaf also known as:

DrWebAdware.Downware.19678
MicroWorld-eScanGen:Variant.Adware.Downloader.211
FireEyeGeneric.mg.11ce923fdfb0de47
McAfeeGenericRXAA-AA!11CE923FDFB0
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusRiskware ( 0055e5601 )
BitDefenderGen:Variant.Adware.Downloader.211
K7GWRiskware ( 0055e5601 )
Invinceaheuristic
APEXMalicious
AvastWin32:PUPX-gen [PUP]
GDataGen:Variant.Adware.Downloader.211
Kasperskynot-a-virus:Downloader.Win32.Agent.miaf
AlibabaDownloader:Win32/Downer.63e5ee1c
NANO-AntivirusRiskware.Win32.Downer.gyvnod
ViRobotAdware.Downer.1126240
AegisLabAdware.Win32.Downer.2!c
Ad-AwareGen:Variant.Adware.Downloader.211
SophosGeneric PUA EP (PUA)
ComodoMalware@#36fbhabsqlsor
F-SecureHeuristic.HEUR/AGEN.1126112
ZillyaAdware.Downer.Win32.4
TrendMicroTROJ_FRS.0NA103AK20
McAfee-GW-EditionArtemis!PUP
EmsisoftApplication.Downloader (A)
IkarusPUA.RiskWare.Downer
CyrenW32/Trojan.WKNR-1926
JiangminAdWare.Downer.r
WebrootW32.Adware.Gen
AviraHEUR/AGEN.1126112
Antiy-AVLTrojan/Win32.Wacatac
Endgamemalicious (high confidence)
ArcabitTrojan.Adware.Downloader.211
SUPERAntiSpywarePUP.FastDownloader/Variant
ZoneAlarmnot-a-virus:HEUR:AdWare.Win32.Downer.gen
MicrosoftPUA:Win32/Downer
CynetMalicious (score: 100)
AhnLab-V3PUP/Win32.Generic.C3478818
VBA32Adware.Downware
ALYacGen:Variant.Adware.Downloader.211
MAXmalware (ai score=99)
MalwarebytesPUP.Optional.FastDownloader
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/RiskWare.Downer.B
TrendMicro-HouseCallTROJ_FRS.0NA103AK20
RisingAdware.Downloader!1.BD64 (CLOUD)
YandexRiskWare.Downer!
eGambitUnsafe.AI_Score_95%
FortinetRiskware/Downer
AVGFileRepMalware [PUP]
Paloaltogeneric.ml
MaxSecureTrojan.Malware.74741744.susgen

How to remove Downloader.Win32.Agent.miaf?

Downloader.Win32.Agent.miaf removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment