How to remove “Trojan.Agent.DLUT”?

The Trojan.Agent.DLUT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Agent.DLUT virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan.Agent.DLUT?


File Info:
name: 941919FED8D76E6FA6D8.mlw
path: /opt/CAPEv2/storage/binaries/0043c7983d3593633877d404ad8572d985fa0cbefc1ad4ae9644640077295afd
crc32: 9EF120C9
md5: 941919fed8d76e6fa6d8db825e3fbf69
sha1: a5c7d4e1574eebc6d485aceb0722bd998831fad9
sha256: 0043c7983d3593633877d404ad8572d985fa0cbefc1ad4ae9644640077295afd
sha512: 3b47c0b4afd1488b8786b5b32d32682b27c8a2632c4a7d70f4e49174dc68f1893dcfea1958c7c7b815fbe85b6c869b02d8bd0408464b54008b49e4ec14fab9f9
ssdeep: 24576:si7APF1kAv3mFjpLJjPGgg50YQ3CAuvubqKO4txMlGUNR+QtM+PrKq16Ag0CnrpO:si0PF1ku3YjdJjPGg77CrKO47MlGUNbv
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15075CFE5F8668E79EC200038F890D4F914EABCB0ED2A845372F97E4F6157DC066594BE
sha3_384: acc35a854e5a41ce64f0e96593a03b911f8a70764f20136b2a281ac2b74328623ef14b30a03cc1fbb24b1a1b4105935f
ep_bytes: 8bff55b901000000505181ec00080000
timestamp: 2016-09-03 13:54:36

Version Info:
0: [No Data]

Trojan.Agent.DLUT also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Agent.DLUT
ALYac	Trojan.Agent.DLUT
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Cyren	W32/SuspPack.AB.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Kryptik.GNWY
APEX	Malicious
ClamAV	Win.Malware.Dlut-6803872-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.Agent.DLUT
NANO-Antivirus	Trojan.Win32.Kryptik.fllvrf
Avast	Win32:Trojan-gen
Tencent	Malware.Win32.Gencirc.10b5c6a2
Ad-Aware	Trojan.Agent.DLUT
Emsisoft	Trojan.Agent.DLUT (B)
Comodo	TrojWare.Win32.Regsup.WY@81oiui
F-Secure	Trojan.TR/Crypt.XPACK.otf
VIPRE	Trojan.Agent.DLUT
McAfee-GW-Edition	Trojan-FQJR!941919FED8D7
Trapmine	suspicious.low.ml.score
FireEye	Generic.mg.941919fed8d76e6f
Sophos	ML/PE-A
SentinelOne	Static AI – Suspicious PE
GData	Trojan.Agent.DLUT
Jiangmin	Trojan.Regsup.bjt
Avira	TR/Crypt.XPACK.otf
MAX	malware (ai score=84)
Antiy-AVL	GrayWare/Win32.Unwaders
Arcabit	Trojan.Agent.DLUT
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/Skeeyah.A!rfn
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Gen.Generic.C2899510
McAfee	Trojan-FQJR!941919FED8D7
VBA32	BScope.Trojan.Fuerboos
Malwarebytes	MachineLearning/Anomalous.97%
Rising	Trojan.Generic@AI.92 (RDML:qrGpxvLyhlPDMrB7fu3d1A)
Yandex	Trojan.Kryptik!q9F4QHw+H8c
Ikarus	Trojan.Crypt
Fortinet	W32/Kryptik.GNWY!tr
BitDefenderTheta	Gen:NN.ZexaF.34582.EvW@aGprougi
AVG	Win32:Trojan-gen
Cybereason	malicious.ed8d76
Panda	Trj/GdSda.A

How to remove Trojan.Agent.DLUT?

Trojan.Agent.DLUT removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X