Should I remove “Trojan-Spy.Win32.Agent.devm”?

The Trojan-Spy.Win32.Agent.devm is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-Spy.Win32.Agent.devm virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan-Spy.Win32.Agent.devm?


File Info:
name: C8C7333473662C14EE70.mlw
path: /opt/CAPEv2/storage/binaries/170206313af7beaa587c5ddea724b0ed6e62e626e614a409650e0c62c7b4d0e8
crc32: 0EA9380D
md5: c8c7333473662c14ee702df5d5ede8a7
sha1: efa8041e7b6a5dd00f4cd9276a90e3893b46a6cc
sha256: 170206313af7beaa587c5ddea724b0ed6e62e626e614a409650e0c62c7b4d0e8
sha512: a98f7c750803606eb77bf1f217433766175e6b49bd71c9beb86b73bd9bd97f47f5613767a0d3a8cf160b9c97341bac66e03b531e58aa8838d6d1772f93198257
ssdeep: 768:lC1qnQITBw4Yz5Dcw1y6KH9Q5yDJ6OB557D2YmRiXUAbArqtGXsDb8x:01qnQITgzh3s6qJ/7DVmYIXsDIx
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1F3135B67A3D28470E460CABC2C38F224BA3B7D311D6551BAA7B9499E4D783905CED373
sha3_384: 6128068a2281b7baedca9961c3887be1830fba4d47e9ec687626f7bb804956752cad638bc87110f8ca1c04e705a8e906
ep_bytes: 558bec83c4ec53565733c08945eca1b0
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Trojan-Spy.Win32.Agent.devm also known as:

McAfee	Artemis!C8C733347366
Malwarebytes	Generic.Malware/Suspicious
Sangfor	Spyware.Win32.Agent.8
CrowdStrike	win/malicious_confidence_60% (D)
Alibaba	TrojanSpy:Win32/Pophot.b3433782
VirIT	Trojan.Win32.Generic.AIKZ
Cyren	W32/A-98954f5c!Eldorado
APEX	Malicious
Kaspersky	Trojan-Spy.Win32.Agent.devm
SUPERAntiSpyware	Trojan.Agent/Gen-Delf
Avast	Win32:Malware-gen
McAfee-GW-Edition	BehavesLike.Win32.Worm.ph
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
Jiangmin	TrojanSpy.Pophot.dvb
Xcitium	TrojWare.Win32.Trojan.Generic.27366250@2ne5ac
ZoneAlarm	Trojan-Spy.Win32.Agent.devm
Microsoft	PUA:Win32/Presenoker
Google	Detected
VBA32	TrojanSpy.Pophot
Cylance	unsafe
Rising	Trojan.Generic@AI.100 (RDML:Zeg5s4+giVdm75F58ZWPRA)
Ikarus	Trojan-Spy.Win32.Pophot
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Trojan-Spy.Win32.Agent.devm?

Trojan-Spy.Win32.Agent.devm removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X