Trojan

Should I remove “Trojan-Dropper.Win32.Agent.tfjnzg”?

Malware Removal

The Trojan-Dropper.Win32.Agent.tfjnzg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Dropper.Win32.Agent.tfjnzg virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Mimics icon used for popular non-executable file format
  • Anomalous binary characteristics

How to determine Trojan-Dropper.Win32.Agent.tfjnzg?


File Info:

name: A2D304571AE2F32CAF9D.mlw
path: /opt/CAPEv2/storage/binaries/4809c831a366e4a7700816ee841eef4c82c1e88b262c711b7a0af7ba11883ede
crc32: A5B78E28
md5: a2d304571ae2f32caf9dfa6787ecfa20
sha1: 2c918ded770df52654b408dc67285130c7700d9f
sha256: 4809c831a366e4a7700816ee841eef4c82c1e88b262c711b7a0af7ba11883ede
sha512: b9ce9141152f1e68d120604f3096f8af173b76fa4ea07ba0ea17bd4469385b55e030726a0f45547c4937fbbd05efefbd67c47513b1dcca82ea16d78090a1ef13
ssdeep: 24576:2aPkcE7tFLuTaNQqw3+k0R6BxmUVdLZmZ1VUZmt:2aPkFvuTamq2l1TZmTiZmt
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15615F102F98041F1C5E52D325CBA96020BB7AEA741E5FE9720C87B053937D51D73AAEE
sha3_384: 41776a55df124134c6ae26f89e53ac713a7da3fd5db56a87719d2500aec107f614737cbe99e7e9763b8b3c1cf8d52b85
ep_bytes: e8ff190000e97ffeffff3b0da0404100
timestamp: 2010-01-01 04:20:07

Version Info:

CompanyName: Microsoft Corporation
FileDescription: Microsoft Word
FileVersion: 14.0.6024.1000
InternalName: WinWord
LegalCopyright: © 2010 Microsoft Corporation. All rights reserved.
LegalTrademarks1: Microsoft® is a registered trademark of Microsoft Corporation.
LegalTrademarks2: Windows® is a registered trademark of Microsoft Corporation.
OriginalFilename: WinWord.exe
ProductName: Microsoft Office 2010
ProductVersion: 14.0.6024.1000
Translation: 0x0000 0x04e4

Trojan-Dropper.Win32.Agent.tfjnzg also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKDZ.98267
FireEyeGeneric.mg.a2d304571ae2f32c
SkyhighBehavesLike.Win32.Generic.dc
ALYacTrojan.GenericKDZ.98267
MalwarebytesGeneric.Malware.AI.DDS
VIPRETrojan.GenericKDZ.98267
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderTrojan.GenericKDZ.98267
K7GWTrojan ( 005490181 )
K7AntiVirusTrojan ( 005490181 )
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/TrojanDropper.Agent.RTY
APEXMalicious
ClamAVWin.Malware.Facido-9768987-0
KasperskyTrojan-Dropper.Win32.Agent.tfjnzg
NANO-AntivirusTrojan.Win32.Fakealert.fhnukn
RisingDropper.Agent!1.B38C (CLASSIC)
EmsisoftTrojan.GenericKDZ.98267 (B)
F-SecureTrojan.TR/Crypt.ZPACK.Gen4
DrWebTrojan.Fakealert.58572
ZillyaDropper.Agent.Win32.565573
Trapminemalicious.high.ml.score
SophosTroj/Mdrop-JTO
IkarusTrojan-Dropper.Win32.Agent
MAXmalware (ai score=87)
GoogleDetected
AviraTR/Crypt.ZPACK.Gen4
VaristW32/FakeAlert.AEG.gen!Eldorado
Antiy-AVLTrojan[Dropper]/Win32.Facido
Kingsoftmalware.kb.a.999
MicrosoftTrojanDropper:Win32/Facido.A!bit
XcitiumTrojWare.Win32.TrojanDropper.Facido.A@7d50kc
ArcabitTrojan.Generic.D17FDB
ZoneAlarmTrojan-Dropper.Win32.Agent.tfjnzg
GDataWin32.Trojan.PSE.18RDAY1
CynetMalicious (score: 100)
AhnLab-V3Dropper/Win.FC.C5524635
Acronissuspicious
McAfeeGenericRXMT-FC!A2D304571AE2
DeepInstinctMALICIOUS
VBA32BScope.TrojanDropper.Agent
Cylanceunsafe
PandaTrj/Genetic.gen
TencentTrojan-Dropper.Win32.Agent.kg
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.219740801.susgen
FortinetW32/Agent.RTY!tr
BitDefenderThetaGen:NN.ZexaF.36792.5S3@aWUVCahi
AVGWin32:DropperX-gen [Drp]
Cybereasonmalicious.d770df
AvastWin32:DropperX-gen [Drp]

How to remove Trojan-Dropper.Win32.Agent.tfjnzg?

Trojan-Dropper.Win32.Agent.tfjnzg removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment