Trojan

Trojan-Dropper.Win32.Agent.bjylbz malicious file

Malware Removal

The Trojan-Dropper.Win32.Agent.bjylbz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Dropper.Win32.Agent.bjylbz virus can do?

  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Dynamic (imported) function loading detected
  • Performs HTTP requests potentially not found in PCAP.
  • HTTPS urls from behavior.
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Attempts to modify proxy settings

How to determine Trojan-Dropper.Win32.Agent.bjylbz?


File Info:

name: E439AEEBDF2C97103BE8.mlw
path: /opt/CAPEv2/storage/binaries/bf7b6e09692a6df6ab5cb2ee7e0579ac3987ffc72757690db2e2d84e381c245c
crc32: F41674ED
md5: e439aeebdf2c97103be8d0d0e06d9852
sha1: b2c67bdaab7bf50ad5aea30255438eddbdd485c9
sha256: bf7b6e09692a6df6ab5cb2ee7e0579ac3987ffc72757690db2e2d84e381c245c
sha512: dfa4873705c041ec96bb2f3d4ecd1448654ba51e0bdfdd0db8724d295fc2b864c0ea11c1a3ef9747a4f6141d859decd822e54ecef2b1a91ee678bd65c7e8c2ed
ssdeep: 49152:J1u4QyQSh8uUctQvUoTIUnTs4r3gBJygnlk:D9Q/ctQMtJjn+
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A8B57C07A3C5403ED826073A4E6795105D377D366A198A4AFEFA790D2FBAA409C3F743
sha3_384: 8de2bd3884390b36846e116e7faef98d10220994c24d79100767607017418e47153f836af816f43a4043984d4e822c56
ep_bytes: 558bec83c4e833c08945ec8945e8b810
timestamp: 2011-06-15 18:43:17

Version Info:

CompanyName: Skype Technologies S.A.
FileDescription: Skype
FileVersion: 5.3.0.120
InternalName: SkypeSetup.exe
LegalCopyright: (c) Skype Technologies S.A.
OriginalFilename: SkypeSetup.exe
ProductName: Skype
ProductVersion: 5.3
BuildTime: 6/15/2011 9:42:38 PM
Translation: 0x0409 0x04e4

Trojan-Dropper.Win32.Agent.bjylbz also known as:

MicroWorld-eScanTrojan.GenericKD.41323622
FireEyeTrojan.GenericKD.41323622
ALYacTrojan.GenericKD.41323622
CylanceUnsafe
ZillyaDropper.Agent.Win32.385466
AlibabaTrojanDropper:Win32/Generic.d36ac070
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
KasperskyTrojan-Dropper.Win32.Agent.bjylbz
BitDefenderTrojan.GenericKD.41323622
AvastFileRepMalware
TencentWin32.Trojan-dropper.Agent.Ahxx
Ad-AwareTrojan.GenericKD.41323622
TrendMicroPUA.Win32.Bundler.SW
McAfee-GW-EditionBehavesLike.Win32.Dropper.vh
EmsisoftTrojan.GenericKD.41323622 (B)
GDataTrojan.GenericKD.41323622
JiangminTrojanDropper.Agent.ghuf
Antiy-AVLTrojan/Generic.ASMalwS.2990AA2
GridinsoftRansom.Win32.Wacatac.sa
MicrosoftTrojan:Win32/Wacatac.B!ml
McAfeeArtemis!E439AEEBDF2C
MAXmalware (ai score=91)
VBA32TrojanDropper.Agent
TrendMicro-HouseCallPUA.Win32.Bundler.SW
YandexTrojan.GenAsa!uWam9hMRiAw
IkarusTrojan.Dropper.Agent
AVGFileRepMalware
Cybereasonmalicious.bdf2c9

How to remove Trojan-Dropper.Win32.Agent.bjylbz?

Trojan-Dropper.Win32.Agent.bjylbz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment