Categories: Trojan

Trojan.Agent.CNPA information

The Trojan.Agent.CNPA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.CNPA virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Arabic (Algeria)
  • Uses Windows utilities for basic functionality
  • Creates a hidden or system file
  • Attempts to modify proxy settings

Related domains:

persist.tippled.ru
formany.eastus.cloudapp.azure.com
www.bing.com

How to determine Trojan.Agent.CNPA?


File Info:

crc32: A9C5C98Amd5: 5385b17b7db6d461e26072ae7d577fabname: 5385B17B7DB6D461E26072AE7D577FAB.mlwsha1: ae152fdefab41f358f85f142ce2241226ac8b5d8sha256: 1dc19e1f457bfea68a6ba3741d17945b622f23c1e2a91e72b1be2bd66cf0a6acsha512: 154d67001436fa865f17dd039b9acfafcc7baa48db0893b70446e04b0ee0df51dea856ac2ebd1748b50821c5a966e6f260f475d04e0705fde6cc66daff272f7assdeep: 3072:qwuRqPppO8tFvLC0A6/1A2UmZ6D8L+pFyzuVZVMYwHKUa/j:1ppO8Do7pppwHKU8type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Agent.CNPA also known as:

Bkav W32.AIDetect.malware1
K7AntiVirus Trojan-Downloader ( 0051835a1 )
Lionic Adware.Win32.Generic.2!c
Elastic malicious (high confidence)
DrWeb Trojan.InstallMonster.2376
Cynet Malicious (score: 100)
CAT-QuickHeal PUA.Mauvaise.S1559878
ALYac Trojan.Agent.CNPA
Cylance Unsafe
Zillya Downloader.Tovkater.Win32.447
Sangfor Trojan.Win32.Tovkater.8
Alibaba TrojanDownloader:Win32/Tovkater.63b0d45c
K7GW Trojan-Downloader ( 0051835a1 )
Cybereason malicious.b7db6d
Cyren W32/Trojan.CCO_C.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 Win32/TrojanDownloader.Tovkater.EG
APEX Malicious
Avast Win32:Malware-gen
Kaspersky not-a-virus:HEUR:AdWare.Win32.Generic
BitDefender Trojan.Agent.CNPA
NANO-Antivirus Riskware.Win32.TOVus.etbcjx
MicroWorld-eScan Trojan.Agent.CNPA
Tencent Malware.Win32.Gencirc.10b402d7
Ad-Aware Trojan.Agent.CNPA
Sophos Mal/Generic-S
Comodo ApplicUnwnt@#2t2ix5viax29v
BitDefenderTheta Gen:NN.ZexaF.34266.vyY@airDhFcG
VIPRE Trojan.Win32.Generic!BT
McAfee-GW-Edition BehavesLike.Win32.Generic.fm
FireEye Generic.mg.5385b17b7db6d461
Emsisoft Trojan.Agent.CNPA (B)
SentinelOne Static AI – Malicious PE
Jiangmin AdWare.TOVus.bg
Webroot W32.Adware.Gen
Avira HEUR/AGEN.1103329
Antiy-AVL Trojan/Generic.ASMalwS.21FE22A
Microsoft Trojan:Win32/Occamy.C
GData Trojan.Agent.CNPA
TACHYON Trojan/W32.Agent.347136.GO
AhnLab-V3 PUP/Win32.Bundler.R210235
McAfee Artemis!5385B17B7DB6
MAX malware (ai score=99)
VBA32 Trojan.InstallMonster
Malwarebytes Trojan.Downloader
Panda Trj/Genetic.gen
Rising Trojan.Generic@ML.95 (RDML:SzgdxiQCqY0xsUCAj77CLQ)
Yandex Trojan.GenAsa!77g2MYxKdOY
Ikarus Trojan-Downloader.Win32.Tovkater
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/Tovkater.EG!tr.dldr
AVG Win32:Malware-gen
Paloalto generic.ml

How to remove Trojan.Agent.CNPA?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

What is “MSIL/TrojanDropper.Agent.BVT”?

The MSIL/TrojanDropper.Agent.BVT is considered dangerous by lots of security experts. When this infection is active,…

3 hours ago

Should I remove “Generic.Dacic.94CCEEA9.A.A4A6DA47”?

The Generic.Dacic.94CCEEA9.A.A4A6DA47 is considered dangerous by lots of security experts. When this infection is active,…

3 hours ago

Malware.AI.524217860 removal tips

The Malware.AI.524217860 is considered dangerous by lots of security experts. When this infection is active,…

3 hours ago

Trojan:Win32/Koutodoor.F removal tips

The Trojan:Win32/Koutodoor.F is considered dangerous by lots of security experts. When this infection is active,…

4 hours ago

How to remove “Malware.AI.1412460714”?

The Malware.AI.1412460714 is considered dangerous by lots of security experts. When this infection is active,…

4 hours ago

Generic.Dacic.8952383F.A.5EC8C34B removal instruction

The Generic.Dacic.8952383F.A.5EC8C34B is considered dangerous by lots of security experts. When this infection is active,…

4 hours ago