Trojan

Trojan.Agent.CANZ removal instruction

Malware Removal

The Trojan.Agent.CANZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.CANZ virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.

How to determine Trojan.Agent.CANZ?


File Info:

crc32: DEB023BC
md5: 4ccf8c1da4903af4c472afa80d355d67
name: 4CCF8C1DA4903AF4C472AFA80D355D67.mlw
sha1: e810c00ad0db4a00ed97e4166b2d04a285df20d3
sha256: e9109ceac713877ad3c06dc6e6ae4374b130677e65eda3ca08c0db7ba521e7bf
sha512: a30ee8ec5ae24d4ffc3201e90336e963da5cd19ca66bf7cad054368f1ae00aded742b912a78c7bdde31e047ee397837b4d3d0a3b969ed70eb264afb2bafbc0a8
ssdeep: 6144:/aEQgDS/vouV5i0b7giVl+WusM4mRUnt79v22xz7D1+x1XjqNZPocFYhf:i5gDGi0b7RadsVnt79vo1WjPpahf
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Andy OS, Inc
InternalName: Andy
FileVersion: 1.1.2.9
ProductName: Andy OS Compiler
ProductVersion: 1.1.2.9
FileDescription: Andy OS Script
OriginalFilename: Andy.exe
Translation: 0x0409 0x04b0

Trojan.Agent.CANZ also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 004fc2101 )
LionicTrojan.Win32.Zbot.l!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader23.7608
CynetMalicious (score: 100)
ALYacTrojan.Zbot.Gen
CylanceUnsafe
ZillyaTrojan.Zbot.Win32.198684
SangforSpyware.Win32.Zbot.xjan
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanSpy:Win32/Kryptik.389d77fc
K7GWTrojan ( 004fc2101 )
Cybereasonmalicious.da4903
CyrenW32/Risk.FMWG-2603
SymantecInfostealer.Limitail
ESET-NOD32a variant of Win32/Kryptik.FTYN
ZonerTrojan.Win32.71313
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan-Spy.Win32.Zbot.xjan
BitDefenderTrojan.Agent.CANZ
NANO-AntivirusTrojan.Win32.Kryptik.ejkcgf
ViRobotTrojan.Win32.S.Agent.491008.CC
MicroWorld-eScanTrojan.Agent.CANZ
TencentWin32.Trojan-spy.Zbot.Pgxj
Ad-AwareTrojan.Agent.CANZ
SophosMal/Generic-S
ComodoMalware@#1nyt5r1gq889w
BitDefenderThetaGen:NN.ZexaF.34266.Dq0@a8Tm4kgi
VIPREWin32.Malware!Drop
TrendMicroTSPY_KRONOS.C
McAfee-GW-EditionBehavesLike.Win32.Emotet.gc
FireEyeGeneric.mg.4ccf8c1da4903af4
EmsisoftTrojan.Agent.CANZ (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojanSpy.Zbot.fhly
WebrootTrojan.Dropper.Gen
AviraHEUR/AGEN.1111811
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.1C2DF99
KingsoftWin32.Troj.Zbot.xj.(kcloud)
MicrosoftTrojanDropper:Win32/Randrew.A!bit
ArcabitTrojan.Agent.CANZ
GDataTrojan.Agent.CANZ
AhnLab-V3Trojan/Win32.Agent.C1642363
Acronissuspicious
McAfeeRDN/Generic PWS.lf
MAXmalware (ai score=100)
VBA32BScope.Trojan.Tiggre
MalwarebytesMachineLearning/Anomalous.97%
PandaTrj/Genetic.gen
TrendMicro-HouseCallTSPY_KRONOS.C
RisingTrojan.Generic@ML.91 (RDML:cyKC9A/18+6iE44QKDPG3A)
YandexTrojan.GenAsa!2KMcXTZYxnc
IkarusTrojan-Ransom.Crypter
FortinetW32/Kryptik.FIXZ!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan.Agent.CANZ?

Trojan.Agent.CANZ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment