Trojan

Trojan.Agent.EXJT (file analysis)

Malware Removal

The Trojan.Agent.EXJT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.EXJT virus can do?

  • Presents an Authenticode digital signature
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Agent.EXJT?


File Info:

crc32: 41542C04
md5: fa279880c96b904a8041c36eabad8b1c
name: upload_file
sha1: 0d22cb3b4f7a9abc7b3cbaf52c453344a617af7d
sha256: dea17105c3a10735f37a3e65de25213d19e3f936e4bc88da33116921769a9831
sha512: 2caae3ba7188b576d38346afcaf739549dd9d0a8503ab949a715025b594796a63cc66542f1c3d0df282f91fb02fb97127c04e7604e8786efe237bb7aca3feb27
ssdeep: 6144:MhJLQTReIOGutSb/WPyLpJ8ifxvToMRUKcgNcS4Zyjij7++V5A+hezgIWpZ2pf70:MQFprWP+vtogUuqZyjij7++V5A+hezgF
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Alexander Roshal 1993-2019
Assembly Version: 5.80.0.0
InternalName: 1.exe
FileVersion: 5.80.0.0
CompanyName: Alexander Roshal
Comments: Command line RAR
ProductName: WinRAR
ProductVersion: 5.80.0.0
FileDescription: Command line RAR
OriginalFilename: 1.exe

Trojan.Agent.EXJT also known as:

Elasticmalicious (high confidence)
DrWebBackDoor.SpyBotNET.25
MicroWorld-eScanTrojan.GenericKD.34762387
FireEyeGeneric.mg.fa279880c96b904a
CAT-QuickHealBackdoor.MSIL
Qihoo-360Generic/Backdoor.c00
ALYacTrojan.Agent.EXJT
CylanceUnsafe
SangforMalware
K7AntiVirusTrojan ( 005707881 )
BitDefenderTrojan.GenericKD.34762387
K7GWTrojan ( 005707881 )
Cybereasonmalicious.b4f7a9
TrendMicroTrojanSpy.MSIL.EMOTET.THJOGBO
BitDefenderThetaGen:NN.ZemsilF.34566.sm2@aurHsxn
CyrenW32/Trojan.FSPZ-4860
SymantecTrojan.Gen.MBT
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Backdoor.MSIL.Crysan.gen
AlibabaBackdoor:MSIL/Kryptik.68c3b6d9
NANO-AntivirusTrojan.Win32.Crysan.hzbsur
ViRobotTrojan.Win32.Z.Agent.309464
Ad-AwareTrojan.GenericKD.34762387
SophosMal/Generic-S
ComodoMalware@#2grjaj4sp74kc
F-SecureTrojan.TR/Kryptik.nuvpc
VIPRETrojan.Win32.Generic!BT
InvinceaMal/Generic-S
McAfee-GW-EditionRDN/Generic.grp
EmsisoftTrojan.GenericKD.34762387 (B)
WebrootW32.Trojan.Gen
AviraTR/Kryptik.nuvpc
MAXmalware (ai score=82)
MicrosoftTrojan:Win32/Ymacco.AADE
ArcabitTrojan.Generic.D2126E93
ZoneAlarmHEUR:Backdoor.MSIL.Crysan.gen
GDataTrojan.GenericKD.34762387
CynetMalicious (score: 100)
McAfeeRDN/Generic.grp
VBA32TScope.Trojan.MSIL
MalwarebytesSpyware.AgentTesla
PandaTrj/GdSda.A
ESET-NOD32a variant of MSIL/Kryptik.YBL
TrendMicro-HouseCallTrojanSpy.MSIL.EMOTET.THJOGBO
TencentWin32.Trojan.Falsesign.Ectr
YandexTrojan.Igent.bUAsNv.3
IkarusTrojan.Inject
eGambitPE.Heur.InvalidSig
FortinetPossibleThreat
AVGWin32:CrypterX-gen [Trj]
AvastWin32:CrypterX-gen [Trj]
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Trojan.Agent.EXJT?

Trojan.Agent.EXJT removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment