Trojan

Trojan.Agent.DACI (B) removal tips

Malware Removal

The Trojan.Agent.DACI (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.DACI (B) virus can do?

  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Anomalous .NET characteristics

How to determine Trojan.Agent.DACI (B)?


File Info:

name: FD6CE00857B55D61A3BB.mlw
path: /opt/CAPEv2/storage/binaries/0e378664a3b2ae12c2327cd6b5fec7f94f75298ae67ff54dfaabb79b37e5dfe9
crc32: F779123A
md5: fd6ce00857b55d61a3bbf04bf12c9b28
sha1: 00aa7d1adc28fb317bac5e16f800f78983eb7a0a
sha256: 0e378664a3b2ae12c2327cd6b5fec7f94f75298ae67ff54dfaabb79b37e5dfe9
sha512: c6f40554f445aeb7c82a2384e558e084c13ae69f1c9b0560733e6658552dec03c246c1df787f4c334e0f57bd98d6bde00eee3a7b79eff5b848db263a403ca848
ssdeep: 96:3uz4E254C2s4y2emZNYrhkmuNMWSoUp9TcE2NYlnlYJnLrL0KffvzBEGvv19RXmY:3ui+mrVWSPGVQnlYJLrLTji4DN
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T13BE1B81663F14275CA5B0B772CB302451773EA05CE67EB6F088CA3E5CDE31654A62E72
sha3_384: f9da7edbfbf6c7ec18014f62b417f1b26176193f5fd1b7613fd585f5d059ce1d8167327bb384556ebcfbb63dab2d0357
ep_bytes: ff250020400000000000000000000000
timestamp: 2017-11-11 09:01:42

Version Info:

Translation: 0x0000 0x04b0
FileDescription:
FileVersion: 0.0.0.0
InternalName: Mozilla.exe
LegalCopyright:
OriginalFilename: Mozilla.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Trojan.Agent.DACI (B) also known as:

BkavW32.FamVT.CerbuPKG.Trojan
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Siggen7.31585
MicroWorld-eScanTrojan.Agent.DACI
FireEyeGeneric.mg.fd6ce00857b55d61
CAT-QuickHealTrojan.Mogoogwi.A3
McAfeeTrojan-FMGK!FD6CE00857B5
MalwarebytesGeneric.Malware.AI.DDS
ZillyaTrojan.Agent.Win32.525695
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:MSIL/Mogoogwi.d6822fc8
K7GWTrojan ( 004be57a1 )
K7AntiVirusTrojan ( 004be57a1 )
BitDefenderThetaGen:NN.ZemsilF.36250.am0@amrjO8n
VirITTrojan.Win32.Generic.BAMF
CyrenW32/S-f2a4b9c7!Eldorado
SymantecTrojan Horse
ESET-NOD32MSIL/Agent.QIF
APEXMalicious
ClamAVWin.Malware.Barys-6804071-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Agent.DACI
NANO-AntivirusTrojan.Win32.Agent.dzsvxi
SUPERAntiSpywareBackdoor.Bot/Variant
AvastMSIL:Agent-CWF [Trj]
TencentTrojan.MSIL.Agent.hk
TACHYONTrojan/W32.DN-Agent.7168.AL
EmsisoftTrojan.Agent.DACI (B)
F-SecureTrojan.TR/Mogoogwi.qifa
VIPRETrojan.Agent.DACI
TrendMicroWORM_MOGOOGWI.SMHA
McAfee-GW-EditionBehavesLike.Win32.Trojan.zt
Trapminemalicious.high.ml.score
SophosTroj/MSIL-CWS
SentinelOneStatic AI – Malicious PE
GDataTrojan.Agent.DACI
JiangminTrojan.Generic01.a
GoogleDetected
AviraTR/Mogoogwi.qifa
Antiy-AVLTrojan/Win32.Agent
XcitiumTrojWare.MSIL.Agent.QIF@6kzu82
ArcabitTrojan.Agent.DACI
ViRobotTrojan.Win32.Agent.7168.FI
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftTrojan:MSIL/Mogoogwi.A
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Zusy.R154407
VBA32TScope.Trojan.MSIL
ALYacTrojan.Agent.DACI
MAXmalware (ai score=88)
Cylanceunsafe
PandaTrj/CI.A
TrendMicro-HouseCallWORM_MOGOOGWI.SMHA
RisingTrojan.Mogoogwi!1.A1A3 (CLASSIC)
YandexTrojan.Agent!N63dxqEYpS0
IkarusTrojan.MSIL.Mogoogwi
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Agent.QIF!tr
AVGMSIL:Agent-CWF [Trj]
DeepInstinctMALICIOUS

How to remove Trojan.Agent.DACI (B)?

Trojan.Agent.DACI (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment