Trojan.Agent.CVZI (file analysis)

The Trojan.Agent.CVZI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Agent.CVZI virus can do?

Executable code extraction
Creates RWX memory
A process created a hidden window
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
Attempts to identify installed AV products by registry key
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Agent.CVZI?


File Info:
crc32: AB059DE4
md5: 3e92c5200896121930a507d21524782a
name: 3E92C5200896121930A507D21524782A.mlw
sha1: 6385b9f1fc4d83fa89fbb2aded732ffa607209da
sha256: 213016e6d4feedf722902052830f40866e2c9d92d0f6464be7c6be1e5879e0f4
sha512: 8c690dfbc0dc77acad8a13693697294ae8963f81fd0a98b8c0bfc6058fb68936ccdfcf757555501f42a672da556516bc1fe551f907142048a739593668942d93
ssdeep: 3072:lRwZIdWRmGF04pSMkZ15b99E35rv+I+RhUgJTlS4c9f+n3/k9ksYeoqUdkjfqq5:luI8RmR9Sq7UmTlK8utEVkjyEFILA
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (c) 2003-2014 Glarysoft Ltd
InternalName: shredder.exe
FileVersion: 5.0.0.11
CompanyName: Glarysoft Ltd
ProductName: Glary Utilities
ProductVersion: 5.0.0.1
FileDescription: Glary Utilities FileShredder
OriginalFilename: shredder.exe
Translation: 0x0804 0x03a8

Trojan.Agent.CVZI also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 005296dd1 )
Lionic	Trojan.Win32.Yakes.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen7.39891
Cynet	Malicious (score: 100)
ALYac	Trojan.Agent.CVZI
Cylance	Unsafe
Zillya	Trojan.Kryptik.Win32.2948310
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
K7GW	Trojan ( 005296dd1 )
Cybereason	malicious.008961
Cyren	W32/Trojan.BRM.gen!Eldorado
Symantec	Packed.Generic.459
ESET-NOD32	a variant of Win32/Kryptik.GCYH
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
ClamAV	Win.Dropper.Bunitu-9890486-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.Agent.CVZI
NANO-Antivirus	Trojan.Win32.Yakes.eyuqmd
MicroWorld-eScan	Trojan.Agent.CVZI
Tencent	Malware.Win32.Gencirc.10c8adea
Ad-Aware	Trojan.Agent.CVZI
Sophos	Mal/Generic-S
Comodo	TrojWare.Win32.TrojanProxy.Bunitu.GETZ@7kt6gk
BitDefenderTheta	Gen:NN.ZexaF.34294.sq0@aq@7CMfj
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TrojanSpy.Win32.TRICKBOT.SMB.hp
McAfee-GW-Edition	BehavesLike.Win32.Ransomware.dm
FireEye	Generic.mg.3e92c52008961219
Emsisoft	Trojan.Agent.CVZI (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Generic.gwpnr
Avira	HEUR/AGEN.1125420
Antiy-AVL	Trojan/Generic.ASMalwS.24F32A8
Microsoft	TrojanProxy:Win32/Bunitu.Q!bit
Arcabit	Trojan.Agent.CVZI
GData	Trojan.Agent.CVZI
TACHYON	Trojan/W32.Agent.296960.KW
AhnLab-V3	Trojan/Win32.Emotet.R259609
Acronis	suspicious
McAfee	Packed-FCK!3E92C5200896
MAX	malware (ai score=99)
VBA32	BScope.Trojan.Yakes
Malwarebytes	Malware.AI.4031647231
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TrojanSpy.Win32.TRICKBOT.SMB.hp
Rising	Trojan.Kryptik!1.B04B (CLASSIC)
Yandex	Trojan.GenAsa!gqgQ4zQ/vkE
Ikarus	Trojan-Dropper.Win32.Bunitu
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Kryptik.GKHG!tr
AVG	Win32:MalwareX-gen [Trj]
Paloalto	generic.ml

How to remove Trojan.Agent.CVZI?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Agent.CVZI (file analysis)