Spy Trojan

Trojan-Spy.Python.Agent removal

Malware Removal

The Trojan-Spy.Python.Agent is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Spy.Python.Agent virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Behavioural detection: Executable code extraction – unpacking
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Trojan-Spy.Python.Agent?


File Info:

name: 1127CD0C10E3D77D2B36.mlw
path: /opt/CAPEv2/storage/binaries/528d1bdb42cdc636ebacd48a00a91cac54c938dd6f6d6bdab896114f39285ea4
crc32: 72DF403B
md5: 1127cd0c10e3d77d2b36902f29f998c9
sha1: 735def4ab498472701ab967e2332886f45a63205
sha256: 528d1bdb42cdc636ebacd48a00a91cac54c938dd6f6d6bdab896114f39285ea4
sha512: 2f9bbf191e5f962361e0056f9177f2e74cccd44173bf2646413553f3c512cbd027a7ac6a3d32d064d3406888c65f4c99e056e352264e978b0b6c7bd84128a56d
ssdeep: 49152:Sucg4/b53BxM8X0gModRPCndM9OH5TAIxTDTj01QzAEK:5c/Te8kgMYsdMwHBFRY1/T
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T161B5AE8193C3C036CDA24C3460956356AF7AED587D25FDC3D998B48DCA778A0E63E386
sha3_384: 2e87b364e324058204fdc029c9ee0ad0ce8d790dac448caceb3ff6d2abee0f2a16ba9d2f19618887e020e175507cb9d4
ep_bytes: e872030000e936fdffff8bff558bec8b
timestamp: 2008-11-10 09:40:35

Version Info:

0: [No Data]

Trojan-Spy.Python.Agent also known as:

McAfeeArtemis!1127CD0C10E3
ZillyaTrojan.GenericKD.Win32.107782
AlibabaTrojanSpy:Application/KeyLogger.fa3e3201
K7GWTrojan ( 00525f2b1 )
K7AntiVirusTrojan ( 00525f2b1 )
ESET-NOD32Python/Spy.KeyLogger.BH
TrendMicro-HouseCallTROJ_GEN.R002H0DKN21
KasperskyHEUR:Trojan-Spy.Python.Agent.gen
AvastFileRepMalware
RisingTrojan.Generic@ML.93 (RDMK:oOLQS/IGUxM2UZj2xdEcqQ)
SophosMal/Generic-S
McAfee-GW-EditionArtemis!Trojan
SentinelOneStatic AI – Suspicious PE
AviraTR/ATRAPS.Gen
MicrosoftTrojan:Win32/Sabsik.TE.B!ml
CynetMalicious (score: 99)
APEXMalicious
IkarusTrojan.Python.Spy
FortinetW32/KeyLogger.BH!tr.spy
AVGFileRepMalware
Cybereasonmalicious.ab4984
MaxSecureTrojan.Malware.300983.susgen

How to remove Trojan-Spy.Python.Agent?

Trojan-Spy.Python.Agent removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment