Trojan.Agent.CKII malicious file

The Trojan.Agent.CKII is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Agent.CKII virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan.Agent.CKII?


File Info:
name: FBCF197A12F0DB0B8460.mlw
path: /opt/CAPEv2/storage/binaries/a92067b35701b34eb6d251e133da31a1c5aa9994b636fd089706b082581c3076
crc32: AF85ED57
md5: fbcf197a12f0db0b846068643f6c9728
sha1: 567720e37200953c3d73ed5e4223da0e92945b9f
sha256: a92067b35701b34eb6d251e133da31a1c5aa9994b636fd089706b082581c3076
sha512: 6e49cd2b316b9a1966a453082690fd847df02e9d31d7ab181b2ba9adf7aea9ba431a7d0a244c0954c8fb4f965cc1f613beb98086df04aa57e6c094468a4b757f
ssdeep: 12288:UB5Ozj9VxxrGSbybXwpFQEZndlGcbH4t:wcPF9GSO8pFDY
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T179948036F2D08837C1732A7D9D5B9268982ABF913D785C463BE82D4C4F3D781742A297
sha3_384: d2a7a06ef28084f89f422354a345ef1942fda22e8b30003218d32ed6fcc4a89afae91849eb6c8f425fb10abe2bbf5d0a
ep_bytes: 558becb9050000006a006a004975f953
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Trojan.Agent.CKII also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Ckii.4!c
MicroWorld-eScan	Trojan.Agent.CKII
FireEye	Trojan.Agent.CKII
CAT-QuickHeal	Trojan.Goabeny.S1357381
McAfee	Trojan-FOBP!FBCF197A12F0
Malwarebytes	Generic.Trojan.Delf.DDS
VIPRE	Trojan.Agent.CKII
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005159971 )
Alibaba	Trojan:Win32/DelpLdr.e1744c70
K7GW	Trojan ( 005159971 )
Cybereason	malicious.372009
Cyren	W32/Delf.GQ.gen!Eldorado
Symantec	SMG.Heur!gen
Elastic	malicious (high confidence)
APEX	Malicious
ClamAV	Win.Trojan.Generic-6335648-0
BitDefender	Trojan.Agent.CKII
Avast	Other:Malware-gen [Trj]
Tencent	Malware.Win32.Gencirc.10b2771d
Emsisoft	Trojan.Agent.CKII (B)
DrWeb	Trojan.Siggen7.26743
Zillya	Trojan.Delf.Win32.101124
McAfee-GW-Edition	BehavesLike.Win32.Generic.gh
Sophos	Troj/DelpLdr-A
SentinelOne	Static AI – Suspicious PE
GData	Trojan.Agent.CKII
Google	Detected
MAX	malware (ai score=89)
Antiy-AVL	Trojan/Win32.Injector.nskh
Xcitium	TrojWare.Win32.Delf.TRU@7ghrh3
Arcabit	Trojan.Agent.CKII
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Goabeny.R207573
ALYac	Trojan.Agent.CKII
Cylance	unsafe
Panda	Trj/CI.A
Ikarus	Trojan.Win32.Delf
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.CKII!dam
AVG	Other:Malware-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Trojan.Agent.CKII?

Trojan.Agent.CKII removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X