Trojan

How to remove “Trojan.Agent.CMWG”?

Malware Removal

The Trojan.Agent.CMWG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.CMWG virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Agent.CMWG?


File Info:

crc32: 7C194C57
md5: b9707a9572e80f02b6e14e40e0016e8f
name: B9707A9572E80F02B6E14E40E0016E8F.mlw
sha1: 1e7aad096de06ab672823cc4e2e20bdc9f433064
sha256: ddc86c130b3c91b14073617fd38560558992dadc19ca1ee2f80481276ad5233f
sha512: 6ecf96094c0f3e636d35308bf42a31318bac578159a3760aec40f9d7d2de5600617a9b9cabbf025a2312d55a2d633209f947ca3e104244a7914806fc2fc9bd3d
ssdeep: 12288:AJ3rhDmkGQZCiMsuQetsOODUPuUtS0PQjcjGIM3svnxG:AJ3rhDWirdYmTGpv
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Agent.CMWG also known as:

BkavW32.AIDetectVM.malware2
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Agent.CMWG
FireEyeGeneric.mg.b9707a9572e80f02
CAT-QuickHealRansom.Exxroute.A4
ALYacTrojan.Agent.CMWG
CylanceUnsafe
ZillyaTrojan.Cryptoff.Win32.453
AegisLabTrojan.Win32.Cryptoff.j!c
SangforMalware
K7AntiVirusTrojan ( 0051b2ad1 )
BitDefenderTrojan.Agent.CMWG
K7GWTrojan ( 00516f3d1 )
Cybereasonmalicious.572e80
BaiduWin32.Trojan.Kryptik.rb
CyrenW32/Nymaim.BZ.gen!Eldorado
SymantecPacked.Generic.493
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Trojan.Tofsee-6345150-0
KasperskyHEUR:Trojan.Win32.Generic
NANO-AntivirusTrojan.Win32.Cryptoff.esrfkt
RisingRansom.Cryptoff!8.E62C (CLOUD)
Ad-AwareTrojan.Agent.CMWG
EmsisoftTrojan.Agent.CMWG (B)
ComodoBackdoor.Win32.Tofsee.FV@7l1ow1
F-SecureHeuristic.HEUR/AGEN.1120889
DrWebTrojan.Siggen7.29857
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_CERBER.SMALY0
McAfee-GW-EditionBehavesLike.Win32.Ransomware.hc
MaxSecureTrojan.Malware.121218.susgen
SophosML/PE-A + Mal/Elenoocka-E
IkarusTrojan-Downloader.Nymaim
JiangminTrojan.Cryptoff.cr
AviraHEUR/AGEN.1120889
MAXmalware (ai score=100)
Antiy-AVLTrojan/Win32.TSGeneric
MicrosoftTrojanDownloader:Win32/Nymaim.K
ArcabitTrojan.Agent.CMWG
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataTrojan.Agent.CMWG
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.RansomCrypt.R211896
Acronissuspicious
McAfeeTrojan-FNZU!B9707A9572E8
TACHYONRansom/W32.Cryptoff.536064.I
VBA32Trojan-Ransom.Cryptoff
MalwarebytesTrojan.Nymaim
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Injector.DRRG
TrendMicro-HouseCallRansom_CERBER.SMALY0
TencentMalware.Win32.Gencirc.10b30fea
YandexTrojan.GenAsa!Uv7v2xiYGaU
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_89%
FortinetW32/Kryptik.FXFR!tr
BitDefenderThetaGen:NN.ZexaF.34804.GmW@aKx0xpf
AVGWin32:Malware-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360Win32/Trojan.Cryptoff.AB

How to remove Trojan.Agent.CMWG?

Trojan.Agent.CMWG removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment