Python/TrojanDownloader.Agent.DO removal instruction

The Python/TrojanDownloader.Agent.DO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Python/TrojanDownloader.Agent.DO virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
Looks up the external IP address

Related domains:

z.whorecord.xyz

a.tomx.xyz

ipinfo.io

How to determine Python/TrojanDownloader.Agent.DO?


File Info:
crc32: D9FC4002
md5: 9f997252d4d84c0f16a0c0395355af38
name: upload_file
sha1: b16b4c651dd4d168eb779808285c03b141029560
sha256: 35fb2d676947d8b7d6dcd9f1890570fb594e9a341cfb9b341c65d615e20ffdaa
sha512: a1413bb05c1abd8817b0336fec522d993c728307b72fa57e2c0831a565f5e7e69607fe81e3def2bbe914912a50efdfb0afade67ec7d6abaf8c848d1762861d53
ssdeep: 98304:oK5scGZ/KyVyGHAeBSut+aFNnxsq8vpc4KbxabdDkaduupkZiYzqqdFYCPO:t5nmJlX+aFFx6hc+kFYYzqqdZ2
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Python/TrojanDownloader.Agent.DO also known as:

MicroWorld-eScan	Trojan.GenericKD.34899484
FireEye	Generic.mg.9f997252d4d84c0f
McAfee	Artemis!9F997252D4D8
Sangfor	Malware
K7AntiVirus	Trojan ( 00571b5b1 )
BitDefender	Trojan.GenericKD.34899484
K7GW	Trojan ( 00571b5b1 )
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Alibaba	TrojanDownloader:Win32/Python.1442c94f
Tencent	Win32.Trojan-downloader.Agent.Hxqf
Ad-Aware	Trojan.GenericKD.34899484
DrWeb	Python.Downloader.38
Invincea	Generic ML PUA (PUA)
Ikarus	Trojan-Downloader.Python.Agent
Webroot	W32.Trojan.Gen
MAX	malware (ai score=89)
Microsoft	PUA:Win32/Presenoker
Arcabit	Trojan.Generic.D214861C
GData	Trojan.GenericKD.34899484
ALYac	Trojan.GenericKD.34899484
ESET-NOD32	Python/TrojanDownloader.Agent.DO
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Agent.DO!tr.dldr
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_60% (W)
Qihoo-360	Generic/HEUR/QVM10.2.C753.Malware.Gen

How to remove Python/TrojanDownloader.Agent.DO?

Python/TrojanDownloader.Agent.DO removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Python/TrojanDownloader.Agent.DO removal instruction