Trojan.Agent.GBZA removal instruction

The Trojan.Agent.GBZA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Agent.GBZA virus can do?

Sample contains Overlay data
Unconventionial language used in binary resources: Maori
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan.Agent.GBZA?


File Info:
name: D1845C32FC805CC79EF4.mlw
path: /opt/CAPEv2/storage/binaries/9f6740fe0f0586df052ea9f857bfc324da5cba2fffb3c20a26ad8bcc523f8f4f
crc32: F6FA12BD
md5: d1845c32fc805cc79ef471ffee96fec9
sha1: c40619f0d7d2787552eabeb6bc53482cf99c4d47
sha256: 9f6740fe0f0586df052ea9f857bfc324da5cba2fffb3c20a26ad8bcc523f8f4f
sha512: f9ea1617c71232765694380df1ffb9c2de4b8918b62d0e7e502aadf8380b27dd36d8f65c27bee6dfd0a6f5384f291a39d2d07d646869e8608166985a3d8f351a
ssdeep: 49152:YEwEcgIYTrNm8kYo0sAg/RUbAjZ035mMOyDFxoUf:YsIEN7kYLsAgmbAjZ035wyDFxoo
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1ED06DF94EBDB896FD3B785B24BA6A3B6341EAED33C03644E8107C719FE39CD19851214
sha3_384: cbb7ed01898cf519b859f1a2ec4f1c23452348c675a123d5837ef91e6d41ba7ed63d6941eb0807e1c34a47a2dbbd2871
ep_bytes: 6824164000e8eeffffff000000000000
timestamp: 2012-09-16 05:37:16

Version Info:
0: [No Data]

Trojan.Agent.GBZA also known as:

Bkav	W32.AIDetectMalware
Lionic	Worm.Win32.WBNA.tnqm
tehtris	Generic.Malware
MicroWorld-eScan	Trojan.Agent.GBZA
FireEye	Trojan.Agent.GBZA
CAT-QuickHeal	Worm.Gamarue.S145097
McAfee	W32/Worm-FIA!D1845C32FC80
Cylance	unsafe
Zillya	Trojan.Injector.Win32.875115
Sangfor	Suspicious.Win32.Save.vb
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Malware:Win32/km_2f1e93.None
K7GW	Trojan ( 003e33751 )
K7AntiVirus	Trojan ( 003eb2a51 )
Baidu	Win32.Trojan.Inject.bh
VirIT	Trojan.Win32.Generic.BSUF
Cyren	W32/Vobfus.IS.gen!Eldorado
Symantec	Downloader.Dromedan
Elastic	malicious (high confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Trojan.Agent.GBZA
NANO-Antivirus	Trojan.Script.Redirector.efsveq
Avast	Win32:AdwareSig [Adw]
Tencent	Malware.Win32.Gencirc.10bc36cf
TACHYON	Worm/W32.WBNA.3906752
Sophos	Mal/VBInj-Y
DrWeb	BackDoor.Andromeda.22
VIPRE	Trojan.Agent.GBZA
McAfee-GW-Edition	BehavesLike.Win32.VBObfus.wh
Emsisoft	Trojan.Agent.GBZA (B)
SentinelOne	Static AI – Malicious PE
GData	Win32.Worm.Gamarue.AP
Jiangmin	Trojan/VBKrypt.hdpu
Antiy-AVL	Trojan/Win32.VBKrypt
Xcitium	TrojWare.Win32.Injector.XFR@4rorse
Arcabit	Trojan.Agent.GBZA
ViRobot	Dropper.Agent.118784.J
Microsoft	Trojan:Win32/Vindor!pz
Google	Detected
AhnLab-V3	Trojan/Win32.Injector.R37109
ALYac	Trojan.Agent.GBZA
MAX	malware (ai score=83)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/CI.A
Rising	Trojan.Injector!1.AE06 (CLASSIC)
Ikarus	Worm.Win32.Gamarue
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.GBZA!tr
AVG	Win32:AdwareSig [Adw]
DeepInstinct	MALICIOUS

How to remove Trojan.Agent.GBZA?

Trojan.Agent.GBZA removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X