Categories: Trojan

How to remove “Trojan-Dropper.Win32.Agent.tettzw”?

The Trojan-Dropper.Win32.Agent.tettzw is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Dropper.Win32.Agent.tettzw virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Trojan-Dropper.Win32.Agent.tettzw?


File Info:

name: 573C7C56391B541EEA19.mlwpath: /opt/CAPEv2/storage/binaries/78e46064bae900e25d62ba7a9e0fccf91d986b957830c4c419380d14b21ebc4acrc32: FC01066Dmd5: 573c7c56391b541eea19cd1ee0d3d0b4sha1: 75748234cde7835109036b37c3a80f1bd96677fasha256: 78e46064bae900e25d62ba7a9e0fccf91d986b957830c4c419380d14b21ebc4asha512: 70789a36096c238dfca54edc0cda2cb1a84cfe3f4ea85c7d84fce567c9ef4399f964450a377672edda95497e8b63fc633731decd9e7465ea8e1c5d0d16525e0bssdeep: 196608:91OzFiIMJVzrfVL2S+UYkbv+WO8QWZfjZSKQRZHrJgAsqL1p:3OzsIM3gS+Ubbv+zWJVSzH1gdqL1ptype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1317633207A9CCDB1F64B01B3915A53D0F6E8E59C4E240B0B23F44B696F7A54C86BBBC5sha3_384: ac2a9d6faa78e13d807e3e33fd3f234c613c31979fd7150716b0a1b443a27cc876b2a93a9051dde382c6df0d58f2856aep_bytes: 558bec6aff68e0b94100682c4a410064timestamp: 2010-11-18 16:27:35

Version Info:

CompanyName: Igor PavlovFileDescription: 7z Setup SFXFileVersion: 9.20InternalName: 7zS.sfxLegalCopyright: Copyright (c) 1999-2010 Igor PavlovOriginalFilename: 7zS.sfx.exeProductName: 7-ZipProductVersion: 9.20Translation: 0x0409 0x04b0

Trojan-Dropper.Win32.Agent.tettzw also known as:

DrWeb Trojan.MulDrop19.10219
MicroWorld-eScan Gen:Variant.Jaik.48175
FireEye Gen:Variant.Jaik.48175
CAT-QuickHeal Trojan.Neoreklami
McAfee Artemis!573C7C56391B
Cylance Unsafe
Alibaba AdWare:Win32/Neoreklami.748a7b3b
Arcabit Trojan.Jaik.DBC2F
BitDefenderTheta Gen:NN.ZexaF.34084.@JW@aiSe5ek
ESET-NOD32 a variant of Win32/Adware.Neoreklami.LI
TrendMicro-HouseCall TROJ_GEN.R002C0PL221
Paloalto generic.ml
Cynet Malicious (score: 100)
Kaspersky Trojan-Dropper.Win32.Agent.tettzw
BitDefender Gen:Variant.Jaik.48175
Avast Win32:Adware-gen [Adw]
Tencent Win32.Trojan-dropper.Agent.Suoa
Ad-Aware Gen:Variant.Jaik.48175
Sophos Mal/Generic-R
TrendMicro TROJ_GEN.R002C0PL221
Emsisoft Gen:Variant.Jaik.48175 (B)
Ikarus PUA.Neoreklami
Jiangmin Adware.Agent.atow
Avira HEUR/AGEN.1145066
MAX malware (ai score=82)
Gridinsoft Ransom.Win32.Sabsik.sa
Microsoft Trojan:Win32/Wacatac.B!ml
GData Gen:Variant.Jaik.48175
ALYac Gen:Variant.Jaik.48175
VBA32 TrojanDropper.Agent
Malwarebytes Adware.Neoreklami
APEX Malicious
Rising Trojan.Generic@ML.92 (RDML:gcvOTdlwmy5wDxfdgHirhw)
Yandex Trojan.DR.Agent!XcXKnTMhazY
SentinelOne Static AI – Malicious SFX
Fortinet Adware/Neoreklami
AVG Win32:Adware-gen [Adw]

How to remove Trojan-Dropper.Win32.Agent.tettzw?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Dropped:Application.Generic.3571726 removal instruction

The Dropped:Application.Generic.3571726 is considered dangerous by lots of security experts. When this infection is active,…

2 mins ago

What is “Trojan.Generic.35245150”?

The Trojan.Generic.35245150 is considered dangerous by lots of security experts. When this infection is active,…

8 mins ago

Malware.AI.1658877817 removal tips

The Malware.AI.1658877817 is considered dangerous by lots of security experts. When this infection is active,…

12 mins ago

About “Win32/Pronny.JI” infection

The Win32/Pronny.JI is considered dangerous by lots of security experts. When this infection is active,…

23 mins ago

Adware.Ursu.14752 removal

The Adware.Ursu.14752 is considered dangerous by lots of security experts. When this infection is active,…

33 mins ago

Should I remove “Symmi.28558”?

The Symmi.28558 is considered dangerous by lots of security experts. When this infection is active,…

43 mins ago