About “Trojan.Win32.Agent.avjn” infection

The Trojan.Win32.Agent.avjn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Agent.avjn virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan.Win32.Agent.avjn?


File Info:
name: 665251DB345D2177BFF3.mlw
path: /opt/CAPEv2/storage/binaries/f5abf44411a7cd9b0496334af90acc1dd2486c19386393b0478b58c582a780b8
crc32: 888EE52E
md5: 665251db345d2177bff3c419aca3156e
sha1: f38447f94ea36553565afc13c5b0929f858dbc8a
sha256: f5abf44411a7cd9b0496334af90acc1dd2486c19386393b0478b58c582a780b8
sha512: 2d06f637c9fe1543102b32b2f6e2835ee88745db89e8661da42d4bf1e49d5ae5276f22abd8973e261e863066eb05759704c461e808e58634655380c9ea755a19
ssdeep: 49152:cYFgi2NA18jN5Pe5b5k1YCdptya507NUUWn043oHS3fTZYwVq1/xT3DDbw0TUqy4:D2JjN5cNhS9Yw8yc2JjN5o
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T151368D13B2F5807AE066E2749E369232D976BD125F34A9DF23941A0C0F76AD05F39363
sha3_384: 5ee14237d03565baa2cf84949889d8a3aebf886c9c04e9297b17de9b6fe9ebba039e8f89c36a0cafd414c67b593b4b02
ep_bytes: 4883ec28e8e70e00004883c428e90200
timestamp: 1981-04-01 11:31:44

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Windows Media Player
FileVersion: 12.0.17134.1 (WinBuild.160101.0800)
InternalName: wmplayer.exe
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: wmplayer.exe
ProductName: Microsoft® Windows® Operating System
ProductVersion: 12.0.17134.1
Translation: 0x0409 0x04b0

Trojan.Win32.Agent.avjn also known as:

MicroWorld-eScan	Trojan.Generic.6889537
FireEye	Trojan.Generic.6889537
ALYac	Trojan.Generic.6889537
Malwarebytes	Trojan.AutoRun
Zillya	Trojan.Agent.Win32.8076
Cybereason	malicious.b345d2
Cyren	W32/Trojan.FCFP-6332
ESET-NOD32	Win32/AutoRun.NAQ
APEX	Malicious
ClamAV	Win.Trojan.Agent-122208
Kaspersky	Trojan.Win32.Agent.avjn
BitDefender	Trojan.Generic.6889537
NANO-Antivirus	Trojan.Win32.Autoruner.giwhpr
Avast	Win32:Small-MOF [Trj]
Ad-Aware	Trojan.Generic.6889537
Sophos	Generic ML PUA (PUA)
DrWeb	Win32.HLLW.Autoruner.6848
Emsisoft	Trojan.Generic.6889537 (B)
Ikarus	Worm.Win32.AutoRun
Avira	HEUR/AGEN.1207283
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Trojan.Generic.6889537 (2x)
MAX	malware (ai score=87)
VBA32	Trojan.Agent
Yandex	Trojan.GenAsa!bmP+U+9tg0o
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Agent.7D47!tr
AVG	Win32:Small-MOF [Trj]
MaxSecure	Trojan.Malware.121218.susgen

How to remove Trojan.Win32.Agent.avjn?

Trojan.Win32.Agent.avjn removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X