Trojan

Trojan.Agent.AIM malicious file

Malware Removal

The Trojan.Agent.AIM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.AIM virus can do?

  • Sample contains Overlay data
  • Unconventionial binary language: Russian
  • Authenticode signature is invalid

How to determine Trojan.Agent.AIM?


File Info:

name: 4BE1706A74B9348CF047.mlw
path: /opt/CAPEv2/storage/binaries/72baf15a0a7867d94c9ab9c79777a04d745c9b0f7af7fecc240d249f9a6ab985
crc32: 7FAE48C5
md5: 4be1706a74b9348cf0474d1c118c4915
sha1: 0f4c1d2977c5377fada132d6d297f098e65a6270
sha256: 72baf15a0a7867d94c9ab9c79777a04d745c9b0f7af7fecc240d249f9a6ab985
sha512: 3272d4bd7b8dd6a0b9533e50919e990b5c832a559d9d0899d0efdb0243b3c73949a3ffcf6fb288e551910ec6bd3c80b25bd210282865750fae34362e82a14f65
ssdeep: 3072:AdaUyTpFsQENxqA8F3LbDrgPU76fyPIIkOuccGxso:AdNyTpFZL5eIVXv
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C204E00579E5D431E4B71F301830C1615F26BC1296B8EBDF6B68427E6EB27C08E29367
sha3_384: 9d1f5b9334cadc61b238ac2693c2b349c3df081492cb8c56eac31e4636bbb53cb6f6eb2544b2f62c5a024f151ffd85bd
ep_bytes: e815300000e989feffff2da403000074
timestamp: 2013-09-20 08:49:42

Version Info:

Comments: Made in Russia
CompanyName: AIMP DevTeam
FileDescription: It is a long string
FileVersion: 3.0.0.810
LegalCopyright: Artem Izmaylov
ProductName: AIMP3
Translation: 0x0419 0x04e3

Trojan.Agent.AIM also known as:

BkavW32.Vetor.PE
tehtrisGeneric.Malware
DrWebWin32.Virut.56
MicroWorld-eScanWin32.Virtob.Gen.12
FireEyeGeneric.mg.4be1706a74b9348c
CAT-QuickHealW32.Virut.G
McAfeeW32/Virut.ad.gen
MalwarebytesTrojan.Agent.AIM
VIPREWin32.Virtob.Gen.12
SangforTrojan.Win32.Save.a
K7AntiVirusVirus ( f10002001 )
K7GWVirus ( f10002001 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaAI:FileInfector.C9457D4313
VirITWin32.Scribble.L
CyrenW32/Agent.XB.gen!Eldorado
SymantecW32.Virut.CF
Elasticmalicious (high confidence)
ESET-NOD32Win32/Virut.NBP
APEXMalicious
TrendMicro-HouseCallPE_VIRUX.J-1
KasperskyVirus.Win32.Virut.ce
BitDefenderWin32.Virtob.Gen.12
NANO-AntivirusTrojan.Win32.NgrBot.fiywdc
AvastWin32:Vitro [Inf]
TencentVirus.Win32.Virut.tu
Ad-AwareWin32.Virtob.Gen.12
EmsisoftWin32.Virtob.Gen.12 (B)
ComodoVirus.Win32.Virut.Ce@1fy3nv
BaiduWin32.Virus.Virut.gen
TrendMicroPE_VIRUX.J-1
McAfee-GW-EditionBehavesLike.Win32.Virut.ch
Trapminemalicious.moderate.ml.score
SophosML/PE-A + W32/Scribble-B
IkarusTrojan-Spy.Win32.Zbot
JiangminWin32/Virut.br
GoogleDetected
AviraW32/Virut.Gen
MAXmalware (ai score=89)
Antiy-AVLTrojan/Generic.ASVirus.2F
MicrosoftVirus:Win32/Virut.EPO
ViRobotWin32.Virut.Gen.C
GDataWin32.Virtob.Gen.12
CynetMalicious (score: 100)
AhnLab-V3Win32/Virut.E
Acronissuspicious
TACHYONVirus/W32.Virut.F
VBA32Virus.Virut.06
RisingVirus.Virut!1.A08B (CLASSIC)
YandexTrojan.GenAsa!jJCgagnlSmo
SentinelOneStatic AI – Malicious PE
FortinetW32/Zbot.PYCG!tr
AVGWin32:Vitro [Inf]
Cybereasonmalicious.a74b93
PandaW32/Sality.AO

How to remove Trojan.Agent.AIM?

Trojan.Agent.AIM removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment