Categories: Trojan

How to remove “Trojan-Downloader.Win32.Agent.xxztiz”?

The Trojan-Downloader.Win32.Agent.xxztiz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Downloader.Win32.Agent.xxztiz virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is likely packed with VMProtect
Authenticode signature is invalid

How to determine Trojan-Downloader.Win32.Agent.xxztiz?


File Info:
name: DA775449FAD569B925A1.mlwpath: /opt/CAPEv2/storage/binaries/22813add4ff629cc52153982e914e818f8f578abdca8664b30febd15eb5dd3b5crc32: 9C21127Bmd5: da775449fad569b925a1100be8d90c8csha1: 46b342b45992207a564e5ee9af083f5807003c71sha256: 22813add4ff629cc52153982e914e818f8f578abdca8664b30febd15eb5dd3b5sha512: 008ca4d6a697b8ea04d08107fd1080d443af71f59d22b74ae6925f78ac04519513aa1d5167624060408146e43de433ee25cac124e8d59aa3f5080ec91f3c3926ssdeep: 98304:O/BbiJSqG4dUGTaYC1YycUsHbtwsbV2KfHbX6A4Uq4LOHllkwTNe2cUQRWn4fzZl:wijGI/aYWYyoGs0SXd4gLAlkGNbOR8ojtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1B346237722550181E0E58E36953BBFC431F6039D5E83BCBC65EAADD23A119E4B306E93sha3_384: 412acfc4685bb224b2c9ee3e77d3f151a324d336ffed9bea056f825aa310d4ac6a430e51ed5e902eeb2b340cab0d97c4ep_bytes: 68ea6d69c9e83e283e00895504f6d28btimestamp: 2021-09-08 15:22:02
Version Info:
FileVersion: 3.2.6.8LegalCopyright: Copyright (C) 2021ProductVersion: 3.2.6.8Translation: 0x0804 0x04b0

Trojan-Downloader.Win32.Agent.xxztiz also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Agent.a!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Symmi.91502
FireEye	Generic.mg.da775449fad569b9
ALYac	Gen:Variant.Symmi.91502
Cylance	Unsafe
Zillya	Downloader.VMProtect.Win32.5
Sangfor	Trojan.Win32.VMProtect.AR
K7AntiVirus	Trojan ( 7000001c1 )
Alibaba	Packed:Win32/VMProtect.4cf6e933
K7GW	Trojan ( 7000001c1 )
Cybereason	malicious.9fad56
BitDefenderTheta	Gen:NN.ZexaF.34232.@F0@a8edpzij
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.VMProtect.AAS
TrendMicro-HouseCall	TROJ_GEN.R002C0RK121
Paloalto	generic.ml
Kaspersky	Trojan-Downloader.Win32.Agent.xxztiz
BitDefender	Gen:Variant.Symmi.91502
Avast	Win32:Malware-gen
Tencent	Win32.Trojan-downloader.Agent.Wstr
Ad-Aware	Gen:Variant.Symmi.91502
Sophos	Mal/Generic-R + Mal/VMProtBad-A
TrendMicro	TROJ_GEN.R002C0RK121
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
Emsisoft	Gen:Variant.Symmi.91502 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	TrojanDownloader.Agent.gatp
Avira	TR/Dldr.Agent.wsroo
MAX	malware (ai score=83)
Antiy-AVL	Trojan/Generic.ASMalwS.34C5F50
Microsoft	Trojan:Win32/Tnega!ml
GData	Gen:Variant.Symmi.91502
Cynet	Malicious (score: 99)
AhnLab-V3	Malware/Win.Reputation.C4397668
McAfee	GenericRXRL-QV!DA775449FAD5
VBA32	TScope.Malware-Cryptor.SB
APEX	Malicious
Rising	Downloader.Agent!8.B23 (CLOUD)
Yandex	Trojan.DL.Agent!ynpIj4XNLBs
Ikarus	Trojan.SuspectCRC
eGambit	Generic.Malware
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_100% (W)
MaxSecure	Trojan.Malware.300983.susgen