Trojan

Trojan.Agent.WL removal

Malware Removal

The Trojan.Agent.WL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.WL virus can do?

  • Sample contains Overlay data
  • Authenticode signature is invalid

How to determine Trojan.Agent.WL?


File Info:

name: 1EB47F05AF6753C63465.mlw
path: /opt/CAPEv2/storage/binaries/6382721e5488ac5ec184cd6e924f1ca5b1d47c74e0a7b1cf00ec67327fff01f6
crc32: 5310AD0A
md5: 1eb47f05af6753c634653f5b599164e7
sha1: b7879c089e90fcf042948423c9d97ff8a083f240
sha256: 6382721e5488ac5ec184cd6e924f1ca5b1d47c74e0a7b1cf00ec67327fff01f6
sha512: 1a528ebf0fc366113ec0eabdd4667e61e1cd901b9616216bd99533649d95e5272b1c36c42763d6b0713a45f31b1516c9d59c87f8f0cc025fa37545bbce7c8556
ssdeep: 96:DixZjmjtjd8jPjcZGR5TIYMLombu5YIb0In+NV9Z3z05jGAWxAzp4Wovb:unSR6bgYBMLNiSIb0A+3QKx9W
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1D7E1CE1E8BE04D23EE4C067E4D4D7CBB68DD5456AFB0691A724C585032948AE1FCFAE4
sha3_384: a6c8abacd151d82075e8671b3f2fb15d72ad2b44b5fc9c146e0b70360171ddf16734a2e220e983d994718b8dc0831dc4
ep_bytes: 558bec538b5d08568b750c578b7d1085
timestamp: 2013-06-02 20:43:59

Version Info:

0: [No Data]

Trojan.Agent.WL also known as:

BkavW32.FamVT.DebrisA.Worm
tehtrisGeneric.Malware
DrWebTrojan.Starter.7266
MicroWorld-eScanGen:Variant.Barys.431082
FireEyeGeneric.mg.1eb47f05af6753c6
CAT-QuickHealTrojan.Agent.WL
SkyhighBehavesLike.Win32.Worm.xt
McAfeeW32/Worm-FKH!1EB47F05AF67
MalwarebytesGeneric.Malware.AI.DDS
VIPREGen:Variant.Barys.431082
SangforSuspicious.Win32.Save.ins
K7AntiVirusEmailWorm ( 0040f50c1 )
K7GWTrojan ( 004436271 )
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderThetaGen:NN.ZedlaF.36802.aq5@aCYOrNp
VirITWorm.Win32.Generic.GJU
SymantecTrojan Horse
Elasticmalicious (high confidence)
ESET-NOD32Win32/Bundpil.AI
APEXMalicious
TrendMicro-HouseCallWORM_GAMARUE.SML
ClamAVWin.Adware.Downware-316
KasperskyWorm.Win32.Debris.b
BitDefenderGen:Variant.Barys.431082
NANO-AntivirusTrojan.Win32.Debris.cssodu
SUPERAntiSpywareWorm.Gamarue
AvastWin32:Sg-G [Trj]
TencentWorm.Win32.Debris.a
TACHYONWorm/W32.Debris.7022
EmsisoftGen:Variant.Barys.431082 (B)
GoogleDetected
F-SecureWorm.WORM/Gamarue.600541
BaiduWin32.Worm.Bundpil.x
ZillyaWorm.DebrisGen.Win32.28
TrendMicroWORM_GAMARUE.SML
SophosTroj/Agent-ACCV
IkarusWorm.Win32.Bundpil
GDataWin32.Worm.Gamarue.AQ
JiangminWorm/Debris.b
VaristW32/Csyr.B.gen!Eldorado
AviraWORM/Gamarue.600541
Antiy-AVLWorm/Win32.Debris
Kingsoftmalware.kb.a.988
XcitiumTrojWare.Win32.Debris.JOUE@4ygmsm
ArcabitTrojan.Barys.D693EA
ViRobotTrojan.Win32.Agent.6329
ZoneAlarmWorm.Win32.Debris.b
MicrosoftWorm:Win32/Gamarue.U
CynetMalicious (score: 100)
AhnLab-V3Worm/Win32.Debris.R68931
Acronissuspicious
VBA32Worm.Gamarue
ALYacGen:Variant.Barys.431082
MAXmalware (ai score=83)
Cylanceunsafe
PandaTrj/Vilsel.AF
RisingWorm.Gamarue!1.9CC1 (CLASSIC)
YandexTrojan.GenAsa!epZR9n5ihTQ
SentinelOneStatic AI – Malicious PE
FortinetW32/Agent.AF!worm
AVGWin32:Sg-G [Trj]
DeepInstinctMALICIOUS
alibabacloudWorm:Win/Gamarue.4783f685

How to remove Trojan.Agent.WL?

Trojan.Agent.WL removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment