What is “Python:Agent-IR [Trj]”?

The Python:Agent-IR [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Python:Agent-IR [Trj] virus can do?

• Sample contains Overlay data
• Reads data out of its own binary image
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• CAPE detected the PyInstaller malware family
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Python:Agent-IR [Trj]?

File Info:
name: E25596A644627D6497BB.mlw
path: /opt/CAPEv2/storage/binaries/7a794cc1e673cf2f4bd104447e9d045b118ecef6e16e8abed08772369c1e1090
crc32: 891F6038
md5: e25596a644627d6497bbfe1bc81ead69
sha1: 0deecef74f4a3a9d24730ae09b13575d0019b2bb
sha256: 7a794cc1e673cf2f4bd104447e9d045b118ecef6e16e8abed08772369c1e1090
sha512: ad2c20b81731b754a7a74608dfa67771014c8ec0558f3589661d1784af2b06cedcd1514f3d3213d008015c359382c02b36e04ef45ed1d1e00af756de2dce2d56
ssdeep: 196608:3c/lOqPnih8FXjLq8DO6e0sKYu/PaQ8jzpLRUZtOQV53tG7jDJEaFVwnd+DEupw+:jqPnLF/3kQOCR9GXDJ3VedGT
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T10BE63394B2A80DF2F4F381791C0B981A566ABC142754DADF43758638CF972A35CBEF60
sha3_384: 6b55c5202637b464ee38ee58b3170804d9a2e3d0baff9a9676547c4e86d3062c6049dea6669976eb403dd574fc03ed2b
ep_bytes: 4883ec28e8670200004883c428e97afe
timestamp: 2023-04-25 11:15:03

Version Info:
0: [No Data]

Python:Agent-IR [Trj] also known as:

How to remove Python:Agent-IR [Trj]?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.