Spy Trojan

Trojan-Spy.Win32.Stealer.aggv removal tips

Malware Removal

The Trojan-Spy.Win32.Stealer.aggv is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Spy.Win32.Stealer.aggv virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan-Spy.Win32.Stealer.aggv?


File Info:

crc32: 6BB63E89
md5: 19abe21384d04e29c5390a6ce72fb271
name: 19ABE21384D04E29C5390A6CE72FB271.mlw
sha1: fcd44bbb17896d7c334a346b3a17eca283ce6b9b
sha256: 1ef6a4846786a97602c0dc4fabd33fad744936f38f25c57b3097616ab7e44ce9
sha512: 0a19a9e2811192a9340e0143925f665e622687152c8de7984973955961b63c9f5e01743968e701e084ed0217a22880f6a9d3f2ddc06fbbdcb157774c0e99fc7f
ssdeep: 49152:U603/eYYGCHCWa0F9qj9spUuBbU5kHELDQsNaCQWdvgh:U5mYYIlUwspU15kHuH3QWdM
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: (C) 2017-2021 NVIDIA Corporation. All rights reserved.
InternalName: NVIDIA GeForce Experience
FileVersion: 73.3683.1933.5
CompanyName: NVIDIA Corporation
ProductName: NVIDIA GeForce Experience
ProductVersion: rel_03_23/6986037
FileDescription: NVIDIA GeForce Experience
Translation: 0x0409 0x04e4

Trojan-Spy.Win32.Stealer.aggv also known as:

BkavW32.AIDetect.malware2
K7AntiVirusRiskware ( 00584baa1 )
LionicTrojan.Win32.Stealer.l!c
Elasticmalicious (high confidence)
DrWebTrojan.Siggen15.35719
CynetMalicious (score: 100)
ALYacTrojan.GenericKD.47353726
CylanceUnsafe
ZillyaTrojan.Stealer.Win32.17442
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojanSpy:Win32/Stealer.a9355ece
K7GWRiskware ( 00584baa1 )
SymantecML.Attribute.HighConfidence
ESET-NOD32MSIL/Spy.Agent.DFY
APEXMalicious
AvastWin32:PWSX-gen [Trj]
KasperskyTrojan-Spy.Win32.Stealer.aggv
BitDefenderTrojan.GenericKD.47353726
ViRobotTrojan.Win32.S.Infostealer.2039808
MicroWorld-eScanTrojan.GenericKD.47353726
Ad-AwareTrojan.GenericKD.47353726
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZexaF.34266.850aaG8kv4ai
TrendMicroTROJ_FRS.0NA103K821
McAfee-GW-EditionBehavesLike.Win32.Trojan.tc
FireEyeGeneric.mg.19abe21384d04e29
EmsisoftTrojan.GenericKD.47353726 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojanSpy.Stealer.hcn
WebrootW32.Stealer.aggv
AviraTR/Spy.Stealer.rrsbl
KingsoftWin32.Troj.Stealer.ag.(kcloud)
MicrosoftTrojan:MSIL/Reline.BE!MTB
GridinsoftSpy.Win32.Agent.dd!s1
GDataTrojan.GenericKD.47353726
AhnLab-V3Trojan/Win.Generic.R449158
McAfeeGenericRXQQ-ZE!19ABE21384D0
MAXmalware (ai score=99)
VBA32TrojanPSW.MSIL.Agent
MalwarebytesSpyware.RedLineStealer
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_FRS.0NA103K821
IkarusTrojan.MSIL.Spy
FortinetPossibleThreat.MU
AVGWin32:PWSX-gen [Trj]
Paloaltogeneric.ml

How to remove Trojan-Spy.Win32.Stealer.aggv?

Trojan-Spy.Win32.Stealer.aggv removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment