Ransom • Trojan

Should I remove “Trojan-Ransom.Win32.Agent.awnp”?

The Trojan-Ransom.Win32.Agent.awnp is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-Ransom.Win32.Agent.awnp virus can do?

Reads data out of its own binary image
Unconventionial language used in binary resources: Russian
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan-Ransom.Win32.Agent.awnp?


File Info:
crc32: 1F89D52E
md5: 3ca24d22e0331b95dc04062a7ad8a438
name: setuper.exe
sha1: 80d97bcde38afd34f066313504e8da842aefee58
sha256: cd2fd881798c4e67003fd79ead23bb247bd9797764634114f0c3aba11eccfdef
sha512: 4c806b427511ebc9d1ade90513ce89fd89370200b34e157a42d7b40de84f429fcacb29da1a23fa67abcb0f51d338e733aa9a59e7f848aa5cb40564b311f7ddd0
ssdeep: 98304:4ithCJLJh9D3BUflSYVGd+n+M3KiKRWxJEWo:rthC1/9+AYVcqwiIXWo
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: (C) StopMalware LLC. All rights reserved
InternalName: install.exe
FileVersion: 1.68.202.0
CompanyName: StopMalware LLC
LegalTrademarks: StopMalware LLC
Comments: Installer Decryptor
ProductName: install
ProductVersion: 1.68.202.0
FileDescription: x423x441x442x430x43dx43ex432x449x438x43a Sm Security Decryptor
OriginalFilename: install.exe
Translation: 0x0000 0x04e3

Trojan-Ransom.Win32.Agent.awnp also known as:

MicroWorld-eScan	Trojan.Ransom.GenericKD.43143948
FireEye	Generic.mg.3ca24d22e0331b95
Qihoo-360	Win32/Trojan.Ransom.dde
McAfee	Artemis!3CA24D22E033
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.Ransom.GenericKD.43143948
K7GW	Riskware ( 0040eff71 )
Symantec	Ransom.Wannacry
Avast	Win32:Malware-gen
GData	Trojan.Ransom.GenericKD.43143948
Kaspersky	Trojan-Ransom.Win32.Agent.awnp
Alibaba	Ransom:Win32/ambww.06b2e297
AegisLab	Trojan.Win32.Wanna.tr1Y
Tencent	Win32.Trojan.Agent.Lneo
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Ransom.ambww
Zillya	Trojan.Generic.Win32.995180
McAfee-GW-Edition	BehavesLike.Win32.Generic.wc
Emsisoft	Trojan.Ransom.GenericKD.43143948 (B)
Ikarus	Trojan-Ransom
Webroot	W32.Malware.Gen
Avira	TR/Ransom.ambww
MAX	malware (ai score=86)
Antiy-AVL	Trojan[Ransom]/Win32.Agent
Microsoft	Trojan:Win32/Occamy.AA
Arcabit	Trojan.Ransom.Generic.D291E78E
ZoneAlarm	Trojan-Ransom.Win32.Agent.awnp
AhnLab-V3	Malware/Win32.RL_Generic.R311737
ALYac	Trojan.Ransom.GenericKD.43116430
Ad-Aware	Trojan.Ransom.GenericKD.43143948
Panda	Trj/CI.A
APEX	Malicious
Rising	Ransom.Agent!8.6B7 (CLOUD)
Fortinet	W32/Zudochka.EEH!tr
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_60% (W)

How to remove Trojan-Ransom.Win32.Agent.awnp?

Trojan-Ransom.Win32.Agent.awnp removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X