Trojan

Trojan.Agent.DJAL malicious file

Malware Removal

The Trojan.Agent.DJAL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.DJAL virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Creates a slightly modified copy of itself

Related domains:

cypruns.com
importhe.com

How to determine Trojan.Agent.DJAL?


File Info:

crc32: 1F8EC728
md5: 4dda929844ce7f0bcbc1cca5734f5352
name: 4DDA929844CE7F0BCBC1CCA5734F5352.mlw
sha1: adfed6d324c565f07a1616f5d685254fe9abaf88
sha256: 1a56dfcea91dc18436674f093ef4f58eea00e171843fccce32cb97d43ba78365
sha512: 1ae3b2a50b3571909393f03df94a2a7f2ec65549ee7c0e6f214229446c392c78b421cd6b890e4ba8d30250758e51b5abe5db48e8fe2bf64972fa0f3cde87843a
ssdeep: 3072:ucvOSHsNLCl5JpHVaQxrB2ssRMMyhk6eIvQ0XIBIrzo:92SsQFyslzkIfoU
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 2015-2017 Amadeus Consulting Farm, Inc.
InternalName: decimalsubject.exe
FileVersion: 3.4.29.76
CompanyName: Amadeus Consulting Farm
ProductName: Periodvalue
ProductVersion: 3.4.29.76
FileDescription: Periodvalue
OriginalFilename: decimalsubject.exe
Translation: 0x0409 0x04b0

Trojan.Agent.DJAL also known as:

K7AntiVirusTrojan ( 005411671 )
Elasticmalicious (high confidence)
DrWebTrojan.IcedID.15
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Mauvaise.SL1
ALYacTrojan.Agent.DJAL
CylanceUnsafe
ZillyaTrojan.Generic.Win32.522164
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanDropper:Win32/dropper.ali1003001
K7GWTrojan ( 005411671 )
Cybereasonmalicious.844ce7
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GNPE
APEXMalicious
AvastWin32:Trojan-gen
ClamAVWin.Malware.Icedid-7337792-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Agent.DJAL
NANO-AntivirusTrojan.Win32.Generic.fkefou
MicroWorld-eScanTrojan.Agent.DJAL
TencentMalware.Win32.Gencirc.10b569da
Ad-AwareTrojan.Agent.DJAL
SophosML/PE-A
ComodoTrojWare.Win32.IcedID.YA@7xwklq
BitDefenderThetaGen:NN.ZexaF.34236.iu0@aOux!xpi
VIPRETrojan.Win32.Generic!BT
TrendMicroTrojanSpy.Win32.URSNIF.SMAL01.hp
McAfee-GW-EditionBehavesLike.Win32.Generic.ch
FireEyeGeneric.mg.4dda929844ce7f0b
EmsisoftTrojan.Agent.DJAL (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Banker.IcedID.dm
AviraTR/Crypt.ZPACK.afif
Antiy-AVLTrojan/Generic.ASMalwS.29564BD
MicrosoftTrojan:Win32/Occamy.C1A
GDataTrojan.Agent.DJAL
TACHYONTrojan/W32.Agent.134144.VP
AhnLab-V3Malware/Win32.Generic.C2837808
Acronissuspicious
McAfeeTrojan-FRGC!4DDA929844CE
MAXmalware (ai score=83)
VBA32TrojanBanker.IcedID
PandaTrj/GdSda.A
TrendMicro-HouseCallTrojanSpy.Win32.URSNIF.SMAL01.hp
RisingTrojan.Generic@ML.100 (RDML:y/71aLS+DKdULGFwU2inGA)
IkarusTrojan.Win32.Crypt
FortinetW32/Kryptik.GMVH!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Trojan.Agent.DJAL?

Trojan.Agent.DJAL removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment