How to remove “Trojan.Agent.GBIZ”?

The Trojan.Agent.GBIZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Agent.GBIZ virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan.Agent.GBIZ?


File Info:
name: A275522B4D19CFA4EEED.mlw
path: /opt/CAPEv2/storage/binaries/0a4616ce15ae5a47daa9dd4505cf342002bfbf8f479e973bc5289985313d8927
crc32: D43F32B0
md5: a275522b4d19cfa4eeed044332b18255
sha1: 58ff3ebb9b0f17a00c974f2cca44136835faa21e
sha256: 0a4616ce15ae5a47daa9dd4505cf342002bfbf8f479e973bc5289985313d8927
sha512: ec8e4dff6a6b437109826498cc5d9a36b862c3103ae3613baf84a8218d0f4afc354cbfac0b23043220ba5402c192a12c22ba9c064061722275b97244fa4e66e5
ssdeep: 3072:i64TRnltulOuQuT1Xw00VXz5H8POGsLo3JEg+I:ITp0EzNYLsLiqI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17174E60373EAA46ED8B277B05EFAD3958633FD259633C21F3284195F5DA0A405E22772
sha3_384: 0712bb4dc0e0c06d3c6a033c6cb0f88157487f59b0d4a3d9a6f369222e45a6044ef1d3f8d317f0c45700c6490db7be4d
ep_bytes: 60be007047008dbe00a0f8ff57eb0b90
timestamp: 2012-01-29 21:27:45

Version Info:
FileDescription: 
FileVersion: 3, 3, 8, 1
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1
Translation: 0x0809 0x04b0

Trojan.Agent.GBIZ also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Trojan.Agent.GBIZ
FireEye	Generic.mg.a275522b4d19cfa4
McAfee	GenericRXAA-AA!A275522B4D19
Cylance	Unsafe
Sangfor	Virus.Win32.Save.a
K7AntiVirus	Trojan ( 700000111 )
K7GW	Trojan ( 700000111 )
Cybereason	malicious.b9b0f1
BitDefenderTheta	Gen:NN.ZexaF.34784.vu0@aOAgE6ni
Cyren	W32/Zusy.MH.gen!Eldorado
ClamAV	Win.Trojan.Generic-9951773-0
BitDefender	Trojan.Agent.GBIZ
Cynet	Malicious (score: 100)
Avast	Win32:Evo-gen [Trj]
Ad-Aware	Trojan.Agent.GBIZ
Sophos	Generic ML PUA (PUA)
Comodo	Packed.Win32.MUPX.Gen@24tbus
F-Secure	Trojan.TR/Dropper.Gen
VIPRE	Trojan.Agent.GBIZ
SentinelOne	Static AI – Malicious PE
Trapmine	malicious.high.ml.score
Emsisoft	Trojan.Agent.GBIZ (B)
APEX	Malicious
GData	Win32.Trojan.PSE.4Z5YRN
Jiangmin	Trojan.MSIL.Zapchast.ag
Avira	TR/Dropper.Gen
MAX	malware (ai score=89)
Antiy-AVL	Trojan/Generic.ASMalwS.50E6
Arcabit	Trojan.Agent.GBIZ
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Google	Detected
AhnLab-V3	Malware/Win.Malware-gen.R498458
Acronis	suspicious
ALYac	Trojan.Agent.GBIZ
Malwarebytes	Malware.AI.392875563
Rising	Dropper.Generic!8.35E (C64:YzY0Oi0LXJc46yhZ)
Ikarus	Trojan-Downloader.Win32.Genome
MaxSecure	Trojan.Malware.184534397.susgen
Fortinet	W32/Zusy.4353!tr
AVG	Win32:Evo-gen [Trj]

How to remove Trojan.Agent.GBIZ?

Trojan.Agent.GBIZ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X