Trojan

Trojan-Dropper.Win32.Agent.tgljob malicious file

Malware Removal

The Trojan-Dropper.Win32.Agent.tgljob is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Dropper.Win32.Agent.tgljob virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Mimics icon used for popular non-executable file format
  • Anomalous binary characteristics

How to determine Trojan-Dropper.Win32.Agent.tgljob?


File Info:

name: E26C016C2BC41F1EB424.mlw
path: /opt/CAPEv2/storage/binaries/ba3e10beabe59a3ff0c4dde1ab32388e61cd14db8b08ea2f7b6b597609eae15f
crc32: C4D55974
md5: e26c016c2bc41f1eb42461c31c173571
sha1: 9b479a361a2f5ce7dd3e32e29f30ce937e674c0a
sha256: ba3e10beabe59a3ff0c4dde1ab32388e61cd14db8b08ea2f7b6b597609eae15f
sha512: 6901a54d8d62491613cbdb8295a41c3b63cb2c2ba36f6d40854bce01896a3cb502798c00dc7c9f732ce7e290f63687e1cbdbb4bea3d7577b3110793f9f3b3f2d
ssdeep: 12288:UT+W8w5SNyDlIjt4uJw/yJEDhLgrqclHaVFMKsqRyZCBHAEKJLZmN1SawY:UTFdYtu/aGtMXLZmN1SawY
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D405F102B58002B1C5D11A711CBA89B24676FEB751E9EE5325C8F70A3533D60973BBEE
sha3_384: 177cc5317b6ad43e3ea373265dc72cc5cfa6f6849f90805eb84ebad44aa4ef93f1f58ae1547fa4eafea7d2024fed5ec7
ep_bytes: e8ff190000e97ffeffff3b0da0404100
timestamp: 2003-02-27 04:20:07

Version Info:

CompanyName: Microsoft Corporation
FileDescription: Microsoft Word
FileVersion: 14.0.6024.1000
InternalName: WinWord
LegalCopyright: © 2010 Microsoft Corporation. All rights reserved.
LegalTrademarks1: Microsoft® is a registered trademark of Microsoft Corporation.
LegalTrademarks2: Windows® is a registered trademark of Microsoft Corporation.
OriginalFilename: WinWord.exe
ProductName: Microsoft Office 2010
ProductVersion: 14.0.6024.1000
Translation: 0x0000 0x04e4

Trojan-Dropper.Win32.Agent.tgljob also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Zusy.545749
FireEyeGeneric.mg.e26c016c2bc41f1e
CAT-QuickHealTrojan.GenericRI.S31998617
SkyhighBehavesLike.Win32.Generic.cc
ALYacGen:Variant.Zusy.545749
Cylanceunsafe
ZillyaDropper.Agent.Win32.580722
SangforSuspicious.Win32.Save.a
K7GWTrojan ( 005490181 )
K7AntiVirusTrojan ( 005490181 )
BitDefenderThetaGen:NN.ZexaF.36804.Z03@ay@0URii
VirITTrojan.Win32.Salgorea.B
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/TrojanDropper.Agent.RTY
APEXMalicious
ClamAVWin.Malware.Facido-9768987-0
KasperskyTrojan-Dropper.Win32.Agent.tgljob
BitDefenderGen:Variant.Zusy.545749
NANO-AntivirusVirus.Win32.Sality.bgiylc
SUPERAntiSpywareTrojan.Agent/Gen-Dropper
TencentTrojan.Win32.Agent.hct
TACHYONTrojan-Dropper/W32.Agent.840839
SophosTroj/Mdrop-JTO
F-SecureTrojan.TR/Crypt.ZPACK.Gen2
DrWebTrojan.Fakealert.58572
VIPREGen:Variant.Zusy.545749
Trapminemalicious.high.ml.score
EmsisoftGen:Variant.Zusy.545749 (B)
IkarusTrojan-Dropper.Win32.Agent
JiangminTrojan.Generic.hrsto
GoogleDetected
AviraTR/Crypt.ZPACK.Gen2
VaristW32/Agent.ION.gen!Eldorado
Antiy-AVLTrojan[Dropper]/Win32.Facido
Kingsoftmalware.kb.a.1000
MicrosoftTrojanDropper:Win32/Facido.A!bit
XcitiumTrojWare.Win32.TrojanDropper.Facido.A@7d50kc
ArcabitTrojan.Zusy.D853D5
ZoneAlarmTrojan-Dropper.Win32.Agent.tgljob
GDataWin32.Trojan.PSE.1FH43YQ
CynetMalicious (score: 100)
AhnLab-V3Dropper/Win.FC.R641846
Acronissuspicious
McAfeeGenericRXMT-FC!E26C016C2BC4
MAXmalware (ai score=80)
VBA32BScope.TrojanDropper.Agent
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
RisingDropper.Agent!1.B38C (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.1728101.susgen
FortinetW32/Agent.RTY!tr
DeepInstinctMALICIOUS

How to remove Trojan-Dropper.Win32.Agent.tgljob?

Trojan-Dropper.Win32.Agent.tgljob removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment