Trojan

Trojan.Agent.CZXP removal instruction

Malware Removal

The Trojan.Agent.CZXP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.CZXP virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the shellcode get eip malware family
  • Anomalous binary characteristics
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan.Agent.CZXP?


File Info:

name: 996F940DA725E7F0C8F3.mlw
path: /opt/CAPEv2/storage/binaries/6b3ef5f4a3e1b64f6cd7a4b3e575654472e3233db178e89d574a5b75a6240d34
crc32: 3615BC9B
md5: 996f940da725e7f0c8f3b399559a2670
sha1: eb605d72dd874220e35b1504251f9c97cfa64a5d
sha256: 6b3ef5f4a3e1b64f6cd7a4b3e575654472e3233db178e89d574a5b75a6240d34
sha512: 6d8da98438c9a2aaa628dbfbad912e0199ac80871d45e8e0675d9d69e731cbe3d75d221e34a3467fd1a66deb1e5bdb8e77ff6b72a277314b68dc8ddfad5ebc47
ssdeep: 24576:lTUejFvW2e9/kGOlomb+pw6qvbEYIPfvl:VUWe989omC9YUvl
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15E050101B4C2F472E06659331938A776557DB9214F294AFF93E8C6BD8FB43C01632AA7
sha3_384: 57d5fdd3ba87e81721c2e0c116d1172fc0460b3d62b172d2d55c4e250102445dfb13cefceb5c3a63ebf473907870c8dc
ep_bytes: e8fc070000e98efeffffff25e8f14a00
timestamp: 2018-06-08 13:36:00

Version Info:

0: [No Data]

Trojan.Agent.CZXP also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Chapak.tppf
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
FireEyeGeneric.mg.996f940da725e7f0
SkyhighBehavesLike.Win32.Generic.bc
ALYacTrojan.Agent.CZXP
Cylanceunsafe
VIPRETrojan.Agent.CZXP
SangforTrojan.Win32.Save.a
AlibabaTrojan:Win32/Chapak.d2d2d1cc
K7GWTrojan ( 0053456b1 )
K7AntiVirusTrojan ( 0053456b1 )
SymantecAdware.IstartSurf
ESET-NOD32a variant of Win32/Kryptik.GHQV
APEXMalicious
Paloaltogeneric.ml
KasperskyTrojan.Win32.Chapak.aawt
BitDefenderTrojan.Agent.CZXP
NANO-AntivirusTrojan.Win32.Chapak.fduubo
SUPERAntiSpywareAdware.IStartSurf/Variant
MicroWorld-eScanTrojan.Agent.CZXP
RisingTrojan.Kryptik!8.8 (TFE:5:wksyXLoYPGJ)
EmsisoftTrojan.Agent.CZXP (B)
F-SecureHeuristic.HEUR/AGEN.1317740
DrWebTrojan.Vittalia.13656
ZillyaTrojan.Kryptik.Win32.1796599
TrendMicroPossible_HPGen-32a
Trapminemalicious.high.ml.score
SophosGeneric Reputation PUA (PUA)
JiangminAdWare.StartSurf.hb
WebrootW32.Adware.Gen
VaristW32/S-9faaf902!Eldorado
AviraHEUR/AGEN.1317740
MAXmalware (ai score=100)
Antiy-AVLTrojan/Win32.Chapak
KingsoftWin32.Trojan.Generic.a
XcitiumApplication.Win32.IStartSurf.PS@8c4m91
ArcabitTrojan.Agent.CZXP
ZoneAlarmTrojan.Win32.Chapak.aawt
GDataTrojan.Agent.CZXP
GoogleDetected
McAfeeGenericRXFS-NT!996F940DA725
TACHYONTrojan/W32.Chapak.803840.ZN
DeepInstinctMALICIOUS
VBA32BScope.AdWare.StartSurf
MalwarebytesCrypt.Trojan.Malicious.DDS
TencentWin32.Trojan.Chapak.Ckjl
YandexTrojan.GenAsa!nNhEcB1zJBg
IkarusTrojan.Kryptik
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.CBZV!tr
BitDefenderThetaGen:NN.ZexaF.36804.XCW@aKDqtEci
PandaTrj/Genetic.gen
alibabacloudMalware

How to remove Trojan.Agent.CZXP?

Trojan.Agent.CZXP removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment