What is “Troj/Dwnld-AIM”?

The Troj/Dwnld-AIM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Troj/Dwnld-AIM virus can do?

Authenticode signature is invalid

How to determine Troj/Dwnld-AIM?


File Info:
name: C75EA333E45C56D74C8D.mlw
path: /opt/CAPEv2/storage/binaries/1cb6ad35363577ee277ae1c7409ab970b3d9ab6ed44bdf86324b749d4a87f911
crc32: 27641165
md5: c75ea333e45c56d74c8dafc3cec9a27d
sha1: b10e5f327693176d8ccaac052e1672fba795c9c5
sha256: 1cb6ad35363577ee277ae1c7409ab970b3d9ab6ed44bdf86324b749d4a87f911
sha512: c8b9f02fe1148a1ffeb8a5a9fa1a8d4bd79cbf273eddcc92ac51edfd708f4fd7bc5ff62aaac127af48658c1a052517e1418842e26daa4e57b52c582c433368cb
ssdeep: 3072:BjVvRnADekWA0zpjit7wACIBRd7fFlST8jetNdfl9ylPuu:/R0WA0p2tdBRdB0T8IN/98X
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1F2D36E3473EDCB19D5BD167068B0611546F7B6593B32D79A9E88F4CE2B2BBC04031BA2
sha3_384: bd0d0faa93b7d00c2790ed5c8985d40a5ad605ed0a0a2ec267364e0fe6d6ffd800201fc470c65f5330a53b25802befc5
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-02-11 12:24:37

Version Info:
Translation: 0x0000 0x04b0
Comments: cfbxqvtnBWbLwR UtuzqnEpNbuXWW mrPZztzFNvULyY zkxDvAtOXUDexM
CompanyName: rZesywckic ndsqGYFFOGQEDR
FileDescription: rEhnJxdPpUzIOo ltIkTOvAJNSkhQ lZhypRroiruTqc
FileVersion: 194.179.214.23
InternalName: 0.exe
LegalCopyright: Copyright © 2023
LegalTrademarks: QnFRhFcTHesMKBBiBjqB
OriginalFilename: 0.exe
ProductName: CxExuUwvWNpNsC ncWpdwqtidjYqYpQVMwmQcSE
ProductVersion: 194.179.214.23
Assembly Version: 24.195.246.194

Troj/Dwnld-AIM also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Agent.Y!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Gen:Heur.Jintor.1
Skyhigh	BehavesLike.Win32.Generic.ch
McAfee	RDN/Generic Downloader.x
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Downloader.AgentAGen.Win32.16203
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan-Downloader ( 0059aa0f1 )
Alibaba	Trojan:Win64/Guildma.75493770
K7GW	Trojan-Downloader ( 0059aa0f1 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Jintor.1
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent_AGen.AIA
Kaspersky	HEUR:Trojan.MSIL.Agent.gen
BitDefender	Gen:Heur.Jintor.1
NANO-Antivirus	Trojan.Win32.AgentAGen.jvkzgs
MicroWorld-eScan	Gen:Heur.Jintor.1
Avast	Win32:TrojanX-gen [Trj]
Tencent	Trojan.Msil.Agent.16000576
Sophos	Troj/Dwnld-AIM
F-Secure	Heuristic.HEUR/AGEN.1307326
DrWeb	Trojan.DownLoaderNET.544
VIPRE	Gen:Heur.Jintor.1
Trapmine	suspicious.low.ml.score
Emsisoft	Gen:Heur.Jintor.1 (B)
SentinelOne	Static AI – Malicious PE
Google	Detected
Avira	HEUR/AGEN.1307326
Antiy-AVL	GrayWare/MSIL.Zombie.a
Kingsoft	malware.kb.c.907
Microsoft	Trojan:Win64/Guildma.psyR!MTB
ZoneAlarm	HEUR:Trojan.MSIL.Agent.gen
GData	MSIL.Trojan-Downloader.Guildma.D
Varist	W32/MSIL_Agent.EIM.gen!Eldorado
AhnLab-V3	Trojan/Win.Dacic.C5305567
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZemsilCO.36744.im0@aq4rRKo
MAX	malware (ai score=86)
VBA32	Trojan.MSIL.MalDown.gen
Cylance	unsafe
Panda	Trj/GdSda.A
Rising	Downloader.Agent!8.B23 (CLOUD)
Yandex	Trojan.DL.Agent_AGen!ZSRF0HrvDuM
Ikarus	Trojan-Downloader.MSIL.Agent
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	MSIL/Heracles.42DE!tr
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Troj/Dwnld-AIM?

Troj/Dwnld-AIM removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X