Categories: Trojan

Python/TrojanDownloader.Agent.DO removal instruction

The Python/TrojanDownloader.Agent.DO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Python/TrojanDownloader.Agent.DO virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
Looks up the external IP address

Related domains:

z.whorecord.xyz

a.tomx.xyz

ipinfo.io

How to determine Python/TrojanDownloader.Agent.DO?


File Info:
crc32: D9FC4002md5: 9f997252d4d84c0f16a0c0395355af38name: upload_filesha1: b16b4c651dd4d168eb779808285c03b141029560sha256: 35fb2d676947d8b7d6dcd9f1890570fb594e9a341cfb9b341c65d615e20ffdaasha512: a1413bb05c1abd8817b0336fec522d993c728307b72fa57e2c0831a565f5e7e69607fe81e3def2bbe914912a50efdfb0afade67ec7d6abaf8c848d1762861d53ssdeep: 98304:oK5scGZ/KyVyGHAeBSut+aFNnxsq8vpc4KbxabdDkaduupkZiYzqqdFYCPO:t5nmJlX+aFFx6hc+kFYYzqqdZ2type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Python/TrojanDownloader.Agent.DO also known as:

MicroWorld-eScan	Trojan.GenericKD.34899484
FireEye	Generic.mg.9f997252d4d84c0f
McAfee	Artemis!9F997252D4D8
Sangfor	Malware
K7AntiVirus	Trojan ( 00571b5b1 )
BitDefender	Trojan.GenericKD.34899484
K7GW	Trojan ( 00571b5b1 )
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Alibaba	TrojanDownloader:Win32/Python.1442c94f
Tencent	Win32.Trojan-downloader.Agent.Hxqf
Ad-Aware	Trojan.GenericKD.34899484
DrWeb	Python.Downloader.38
Invincea	Generic ML PUA (PUA)
Ikarus	Trojan-Downloader.Python.Agent
Webroot	W32.Trojan.Gen
MAX	malware (ai score=89)
Microsoft	PUA:Win32/Presenoker
Arcabit	Trojan.Generic.D214861C
GData	Trojan.GenericKD.34899484
ALYac	Trojan.GenericKD.34899484
ESET-NOD32	Python/TrojanDownloader.Agent.DO
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Agent.DO!tr.dldr
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_60% (W)
Qihoo-360	Generic/HEUR/QVM10.2.C753.Malware.Gen