Trojan

About “Trojan.Agent.Swotter” infection

Malware Removal

The Trojan.Agent.Swotter is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.Swotter virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Agent.Swotter?


File Info:

crc32: 5EF669BE
md5: b382a702dd1812f0d4aa3b041ee809d7
name: upload_file
sha1: cc1fdf99a973eada90a1b6e70493b3a9dd0ef2bd
sha256: 75f121f9048171649f3ba28afcd30a1dcd668266717b0d98e8bac88afe411fe7
sha512: 57cc6d522c37c2d53b34b5cce4c58d503f1137a4e72a4107e6ba31898a0a660007f751ac2966dab4405500f9922dcb9740b91b85857c49c5f5f781059952f85b
ssdeep: 24576:YmfS9nJhEWdyJHUfJ8186Go3wgEMTh19pdHEPuWOQ+I1TfuOJPsYezzMiwnhI24:vfS1Jhc0fOdAgnrW5fWc
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Ferrero SpA All rights reserved
Assembly Version: 2.89.0.4
InternalName: XG.exe
FileVersion: 2.2.0.0
CompanyName: Ferrero International S.A.
LegalTrademarks: Ferrero
Comments: Ferrero SpA
ProductName: Thorntons
ProductVersion: 2.2.0.0
FileDescription: Thorntons
OriginalFilename: XG.exe

Trojan.Agent.Swotter also known as:

DrWebTrojan.InjectNET.14
MicroWorld-eScanTrojan.GenericKD.34824651
McAfeePWS-FCSJ!B382A702DD18
CylanceUnsafe
AegisLabTrojan.Multi.Generic.4!c
SangforMalware
CrowdStrikewin/malicious_confidence_90% (W)
BitDefenderTrojan.GenericKD.34824651
K7GWTrojan ( 005716821 )
K7AntiVirusTrojan ( 005716821 )
ArcabitTrojan.Generic.D21361CB
InvinceaMal/Generic-S
BitDefenderThetaGen:NN.ZemsilF.34570.Nn0@ayJFvic
CyrenW32/MSIL_Kryptik.BXW.gen!Eldorado
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTrojan.MSIL.WACATAC.USMANJJ20
Paloaltogeneric.ml
KasperskyHEUR:Trojan.MSIL.Taskun.gen
Ad-AwareTrojan.GenericKD.34824651
EmsisoftTrojan.GenericKD.34824651 (B)
F-SecureTrojan.TR/AD.Swotter.kmmes
TrendMicroTrojan.MSIL.WACATAC.USMANJJ20
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.mg.b382a702dd1812f0
IkarusTrojan.MSIL.Krypt
AviraTR/AD.Swotter.kmmes
MicrosoftTrojan:Win32/Wacatac.C!ml
ZoneAlarmHEUR:Trojan.MSIL.Taskun.gen
GDataTrojan.GenericKD.34824651
CynetMalicious (score: 85)
VBA32CIL.HeapOverride.Heur
ALYacTrojan.Agent.Swotter
MAXmalware (ai score=84)
MalwarebytesTrojan.MalPack.PNG.Generic
PandaTrj/GdSda.A
APEXMalicious
ESET-NOD32Win32/Formbook.AA
TencentMsil.Trojan.Taskun.Pepe
eGambitUnsafe.AI_Score_99%
FortinetMSIL/GenKryptik.EUPT!tr
AVGWin32:RATX-gen [Trj]
AvastWin32:RATX-gen [Trj]
Qihoo-360Generic/Trojan.03b

How to remove Trojan.Agent.Swotter?

Trojan.Agent.Swotter removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment