Categories: Trojan

Should I remove “PowerShell/TrojanDownloader.Agent.DV”?

The PowerShell/TrojanDownloader.Agent.DV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PowerShell/TrojanDownloader.Agent.DV virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
A process created a hidden window
Executed a very long command line or script command which may be indicative of chained commands or obfuscation
A scripting utility was executed
Uses Windows utilities for basic functionality
Stores JavaScript or a script command in the registry, likely for persistence or configuration
Collects information to fingerprint the system
Anomalous binary characteristics

How to determine PowerShell/TrojanDownloader.Agent.DV?


File Info:
crc32: D503F908md5: 574125c5331d20a7bae6732a4e099807name: 574125C5331D20A7BAE6732A4E099807.mlwsha1: eca54341e1c3a6d31b8dba2e29020b505aee0b07sha256: 7bc29edcbb6ab7fae89b87a34919f94988a114d522b066b0dcc223d69dbe0d57sha512: b9f243ba1388b8e6bda0438001a91df3f7203eb0288025b5e3f33215de9836560606f1fe41f838f91df157f0c11145d2fd08874edda285b9e22c1fbade552f37ssdeep: 1536:17fPGykbOqjoHm4pICdfkLtAfupcWX50MxFY+yIOlnToIffxdFcP77jO:hq6+ouCpk2mpcWJ0r+QNTBff/Ftype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

PowerShell/TrojanDownloader.Agent.DV also known as:

Bkav	W32.CerezoAgentHAD.Trojan
MicroWorld-eScan	Trojan.GenericKD.36327617
FireEye	Generic.mg.574125c5331d20a7
McAfee	Artemis!574125C5331D
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Tiny.trFe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005036361 )
BitDefender	Trojan.GenericKD.36327617
K7GW	Trojan ( 005036361 )
Cybereason	malicious.1e1c3a
Cyren	W32/Trojan.QIYA-0745
Symantec	Trojan.Gen.MBT
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	Exploit.Win32.BypassUAC.abjz
Alibaba	TrojanDownloader:BAT/BypassUAC.60a45b3c
NANO-Antivirus	Trojan.Win32.DelAll.gagnzn
Tencent	Powershell.Trojan-downloader.Agent.Suxl
Ad-Aware	Trojan.GenericKD.36327617
Emsisoft	Trojan.GenericKD.36327617 (B)
Comodo	Malware@#apk6bg7uns40
Zillya	Tool.Lazagne.Win32.102
TrendMicro	Trojan.Win32.KOCTOPUS.A
McAfee-GW-Edition	BehavesLike.Win32.Generic.cm
Sophos	Mal/Generic-S
Ikarus	Trojan-Downloader.PowerShell.Agent
Jiangmin	Trojan.PowerShell.bj
Antiy-AVL	Trojan/Win32.Tiggre
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Script/Phonzy.A!ml
Gridinsoft	Trojan.Win32.Downloader.sa
Arcabit	Trojan.Generic.D22A50C1
ZoneAlarm	Exploit.Win32.BypassUAC.abjz
GData	Trojan.GenericKD.36327617
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.36327617
MAX	malware (ai score=81)
Malwarebytes	Malware.Heuristic.1008
Zoner	Trojan.Win32.85523
ESET-NOD32	PowerShell/TrojanDownloader.Agent.DV
TrendMicro-HouseCall	Trojan.Win32.KOCTOPUS.A
Rising	Exploit.BypassUAC!8.87F5 (CLOUD)
eGambit	Unsafe.AI_Score_96%
Fortinet	Malicious_Behavior.SB
AVG	Win32:Trojan-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Win32/Trojan.BypassUAC.HwUBGaMA