Categories: Trojan

Trojan.Agent.CZOH (B) removal tips

The Trojan.Agent.CZOH (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.CZOH (B) virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Spanish (Guatemala)
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Creates a slightly modified copy of itself
  • Anomalous binary characteristics

Related domains:

ipv4bot.whatismyipaddress.com
ns1.wowservers.ru
carder.bit
ns2.wowservers.ru
ransomware.bit

How to determine Trojan.Agent.CZOH (B)?


File Info:

crc32: DB2D4542md5: 3e082ff79310867bcdde39820d8c73d9name: 3E082FF79310867BCDDE39820D8C73D9.mlwsha1: 9e11d76b2b361a21dcd32a4639302fb2b5c24769sha256: b200fed6c5e35af4e026d18eaec984b869e5b5455b2bbefe11ae0910757f7a33sha512: 10c37d2fd4ea68dde3a162069ca8e98626d889756c4412555dbaa32e31a41dff09cb60586d693a8d60b97bd59561d7b3068567234211676a80623409de6c0c50ssdeep: 6144:skLm3xU1qbOjxE6g9A5doCkFLO54SODBW690:skMe1qeE620asYAq0type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Agent.CZOH (B) also known as:

Bkav W32.AIDetect.malware1
Elastic malicious (high confidence)
DrWeb Trojan.Encoder.24384
MicroWorld-eScan Trojan.Agent.CZOH
FireEye Generic.mg.3e082ff79310867b
CAT-QuickHeal Trojan.Mauvaise.SL1
Qihoo-360 Win32/Trojan.Ransom.GandCrab.AQ
McAfee GenericRXFP-CP!3E082FF79310
Cylance Unsafe
VIPRE Trojan.Win32.Generic!BT
AegisLab Trojan.Win32.Generic.4!c
Sangfor Win.Packed.Gandcrab-6552923-4
K7AntiVirus Trojan ( 0053305e1 )
BitDefender Trojan.Agent.CZOH
K7GW Trojan ( 005185801 )
Cybereason malicious.793108
BitDefenderTheta Gen:NN.ZexaF.34590.qyX@aOAJkV5
Cyren W32/S-184acebd!Eldorado
Symantec Packed.Generic.525
APEX Malicious
Avast Win32:MalwareX-gen [Trj]
ClamAV Win.Packed.Gandcrab-6552923-4
Kaspersky HEUR:Trojan.Win32.Generic
NANO-Antivirus Trojan.Win32.Encoder.fculff
ViRobot Trojan.Win32.GandCrab.Gen.A
Tencent Malware.Win32.Gencirc.10b2b0f7
Ad-Aware Trojan.Agent.CZOH
Sophos Mal/Generic-R + Mal/Agent-AUL
Comodo TrojWare.Win32.Cloxer.AY@7o68fu
F-Secure Heuristic.HEUR/AGEN.1103298
Zillya Trojan.GandCrypt.Win32.454
TrendMicro Ransom.Win32.GANDCRAB.SMLA.hp
McAfee-GW-Edition BehavesLike.Win32.Generic.dc
Emsisoft Trojan.Agent.CZOH (B)
SentinelOne Static AI – Malicious PE
Avira HEUR/AGEN.1103298
MAX malware (ai score=100)
Antiy-AVL Trojan/Win32.TSGeneric
Microsoft Trojan:Win32/CryptInject.PVS!MTB
Arcabit Trojan.Agent.CZOH
ZoneAlarm HEUR:Trojan.Win32.Generic
GData Trojan.Agent.CZOH
Cynet Malicious (score: 100)
AhnLab-V3 Win-Trojan/Gandcrab.Exp
Acronis suspicious
VBA32 Malware-Cryptor.Limpopo
ALYac Trojan.Agent.CZOH
TACHYON Ransom/W32.GandCrab
Malwarebytes Gandcrab.Ransom.Encrypt.DDS
Panda Trj/Genetic.gen
ESET-NOD32 a variant of Win32/Kryptik.GHDU
TrendMicro-HouseCall Ransom.Win32.GANDCRAB.SMLA.hp
Rising Trojan.GenKryptik!8.AA55 (CLOUD)
Yandex Trojan.GenAsa!ztnny5Isebg
Ikarus Trojan-Ransom.GandCrab
Fortinet W32/GenKryptik.CNAR!tr
AVG Win32:MalwareX-gen [Trj]
Paloalto generic.ml
CrowdStrike win/malicious_confidence_100% (D)
MaxSecure Ransomeware.CRAB.gen

How to remove Trojan.Agent.CZOH (B)?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

What is “Malware.AI.3626822667”?

The Malware.AI.3626822667 is considered dangerous by lots of security experts. When this infection is active,…

8 mins ago

Trojan:Win32/Zusy.GXZ!MTB information

The Trojan:Win32/Zusy.GXZ!MTB is considered dangerous by lots of security experts. When this infection is active,…

13 mins ago

Malware.AI.1681308215 removal tips

The Malware.AI.1681308215 is considered dangerous by lots of security experts. When this infection is active,…

14 mins ago

Application.Babar.402455 removal tips

The Application.Babar.402455 is considered dangerous by lots of security experts. When this infection is active,…

15 mins ago

Malware.AI.4231428423 removal

The Malware.AI.4231428423 is considered dangerous by lots of security experts. When this infection is active,…

40 mins ago

Malware.AI.1993670149 information

The Malware.AI.1993670149 is considered dangerous by lots of security experts. When this infection is active,…

44 mins ago