Spy Trojan

Trojan.SpyAgent malicious file

Malware Removal

The Trojan.SpyAgent is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.SpyAgent virus can do?

  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Crashed cuckoomon during analysis. Report this error to the Github repo.
  • A system process is generating network traffic likely as a result of process injection
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Creates a copy of itself
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
www.realtime-spy.com

How to determine Trojan.SpyAgent?


File Info:

crc32: 388DA301
md5: 323c6af429ec8da72cb81afb0681fea8
name: 323C6AF429EC8DA72CB81AFB0681FEA8.mlw
sha1: c81ec344fb06cda9a8b60d2290e5aaef2c0cbf5a
sha256: 20f3e7156ce53b04d27be39b456fe255446d492fa169c536f2a459bbeb422e14
sha512: d8db008e15b44eb7d32aed6135d61d3a138928c1af224eda0ddf9b9622baf0bb8e4991c9863bfb935e5622c1e9bae76c5874dfbd6d35ddd0dd10cf2b5d55c0a3
ssdeep: 3072:09LPv4EtAvEsG8GyAbD/e4WdSwjjiM2Mvhx9ZJ1d051EaZoXl:09z4AAAEAba4WdLOM1Dd05TZoXl
type: MS-DOS executable, MZ for MS-DOS

Version Info:

0: [No Data]

Trojan.SpyAgent also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan-Downloader ( 00499b341 )
Elasticmalicious (high confidence)
DrWebTrojan.FakeAV.20181
CynetMalicious (score: 100)
ALYacGen:Trojan.Malware.hmraaqcClRgi
CylanceUnsafe
ZillyaDownloader.SpyAgent.Win32.155
CrowdStrikewin/malicious_confidence_80% (D)
AlibabaTrojanDownloader:Win32/Malex.2fcba186
K7GWTrojan-Downloader ( 00499b341 )
Cybereasonmalicious.429ec8
CyrenW32/Agent.CHW.gen!Eldorado
SymantecSMG.Heur!gen
ESET-NOD32a variant of Win32/TrojanDownloader.SpyAgent.NAC
APEXMalicious
AvastWin32:Malware-gen
KasperskyUDS:Trojan.Win32.Agent.sb
BitDefenderGen:Trojan.Malware.hmraaqcClRgi
NANO-AntivirusTrojan.Win32.FakeAV.fffuod
MicroWorld-eScanGen:Trojan.Malware.hmraaqcClRgi
TencentMalware.Win32.Gencirc.10b3f29c
Ad-AwareGen:Trojan.Malware.hmraaqcClRgi
SophosML/PE-A + Mal/Behav-024
BitDefenderThetaGen:NN.ZexaF.34294.hmraaqcClRgi
VIPREBehavesLike.Win32.Malware.bsm (vs)
TrendMicroMal_DLDER
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
FireEyeGeneric.mg.323c6af429ec8da7
EmsisoftGen:Trojan.Malware.hmraaqcClRgi (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.ccqmb
AviraSPR/Tool.Monitor.Gen2
eGambitUnsafe.AI_Score_79%
Antiy-AVLTrojan/Generic.ASMalwS.295C414
MicrosoftTrojan:Win32/Occamy.C
GDataGen:Trojan.Malware.hmraaqcClRgi
AhnLab-V3Malware/Win32.Dlder.C373431
Acronissuspicious
McAfeeGenericRXAA-AA!323C6AF429EC
MAXmalware (ai score=100)
VBA32BScope.TrojanSpy.Ursnif
MalwarebytesTrojan.SpyAgent
PandaTrj/Genetic.gen
TrendMicro-HouseCallMal_DLDER
YandexTrojan.GenAsa!J2M8vkKYJuw
IkarusTrojan-Downloader.Win32.SpyAgent
FortinetW32/SpyAgent.NAB!tr.dldr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan.SpyAgent?

Trojan.SpyAgent removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment