Trojan

Trojan.Agent.DFTP (B) removal tips

Malware Removal

The Trojan.Agent.DFTP (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.DFTP (B) virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Trojan.Agent.DFTP (B)?


File Info:

crc32: 1B1FB90B
md5: bb0aae244cef6f146dec9d0dfdc78342
name: BB0AAE244CEF6F146DEC9D0DFDC78342.mlw
sha1: 16f13b8ff48b644816742c39c58665227a64cfd1
sha256: 1e33690c80eec895c614a14f985264f3d034e532d30898e82f10be7b361dc504
sha512: b69f39f37a6a74c3192c85ddf846e0f6dc7c44e7a2732011f154af32a46429bee535c8b9378b7c3e250dc87f8d0587c8634989a322ce0af6e93405d34130f8af
ssdeep: 6144:72yB9vqp1dVHrpLm3efYzGKupLDbCzhmBDMHf6EhsLqyQJoZ9s7V:w1dVLp63efY4p+oESA
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa92013 LogiGear Brought, Inc. All Rights Reserved
InternalName: Properthird.exe
FileVersion: 1.1.74.74
CompanyName: LogiGear Brought
ProductName: Properthird
ProductVersion: 1.1.74.74
FileDescription: Properthird
Translation: 0x0409 0x04e4

Trojan.Agent.DFTP (B) also known as:

K7AntiVirusTrojan ( 0053df611 )
LionicTrojan.Win32.Ursnif.4!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader27.7217
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Agent.S3889117
ALYacTrojan.Agent.DFTP
CylanceUnsafe
ZillyaTrojan.Ursnif.Win32.2523
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_70% (D)
AlibabaTrojanSpy:Win32/Ursnif.b18348f3
K7GWTrojan ( 0053df611 )
Cybereasonmalicious.44cef6
CyrenW32/S-ff0becab!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GLIE
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
ClamAVWin.Malware.Dftp-6706182-0
KasperskyTrojan-Spy.Win32.Ursnif.aacs
BitDefenderTrojan.Agent.DFTP
NANO-AntivirusTrojan.Win32.GenKryptik.finhwu
MicroWorld-eScanTrojan.Agent.DFTP
TencentMalware.Win32.Gencirc.10b10d3c
Ad-AwareTrojan.Agent.DFTP
SophosMal/Generic-S + Mal/Zbot-UU
ComodoTrojWare.Win32.Agent.ZDN@7vtnrb
BitDefenderThetaGen:NN.ZexaF.34266.Rq0@aqmeEfoi
VIPRETrojan.Win32.Generic!BT
TrendMicroTrojanSpy.Win32.URSNIF.SMKA0.hp
McAfee-GW-EditionBehavesLike.Win32.Generic.jh
FireEyeGeneric.mg.bb0aae244cef6f14
EmsisoftTrojan.Agent.DFTP (B)
SentinelOneStatic AI – Suspicious PE
AviraHEUR/AGEN.1122921
Antiy-AVLTrojan/Generic.ASMalwS.284575B
MicrosoftTrojanSpy:Win32/Ursnif
ArcabitTrojan.Agent.DFTP
GDataTrojan.Agent.DFTP
TACHYONTrojan/W32.Agent.708608.XV
AhnLab-V3Trojan/Win.Emotet.R437444
Acronissuspicious
McAfeeTrojan-FQEW!BB0AAE244CEF
MAXmalware (ai score=100)
VBA32TrojanSpy.Ursnif
MalwarebytesTrojan.MalPack
PandaTrj/Genetic.gen
TrendMicro-HouseCallTrojanSpy.Win32.URSNIF.SMKA0.hp
RisingTrojan.Generic@ML.100 (RDML:wXf5J96luWIidG/aYQE3iw)
YandexTrojan.GenAsa!pJtKp8q+8v8
IkarusTrojan.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.DVLO!tr
AVGWin32:TrojanX-gen [Trj]
Paloaltogeneric.ml

How to remove Trojan.Agent.DFTP (B)?

Trojan.Agent.DFTP (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment