Should I remove “Trojan.Win32.Agent.nezvfi”?

The Trojan.Win32.Agent.nezvfi is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Agent.nezvfi virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan.Win32.Agent.nezvfi?


File Info:
name: 1025CD641E0128879A7D.mlw
path: /opt/CAPEv2/storage/binaries/4a2922f480c99be07d5a1e38f31bf7be90167d9ff6a15d3db3efd6e8b33a76ab
crc32: 048A21BF
md5: 1025cd641e0128879a7dde1db14ee337
sha1: df3fa9e222abca1549099944c063cc9207415c0f
sha256: 4a2922f480c99be07d5a1e38f31bf7be90167d9ff6a15d3db3efd6e8b33a76ab
sha512: a708e8837f17ca7930589bb22f22c4856449c2421068d26a68acff382774874a15b7a61e5b4e94b0fb0a680054a379c63a7729ad37de318d99a7fab1350d3406
ssdeep: 1536:AlvU9vSnvUiT8yErwqpN+D5V4G9o56SbEHCpWwpU6cWz0sKER7NulySZESodGcOO:AlvWvoHTIrwqr+D5V4G9FayCswpU6Fzz
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15583E925BA0145BACCB305F09B476FFED620891C0422C62EE394DC5AFFB79527A2D316
sha3_384: 6fb03b95a776a2d6ab98d1a85355d36a850ba94b19ba52df0fd5413d284565bb45076612ec321749399f358e2ffe0fba
ep_bytes: 5589e583ec08c7042402000000ff158c
timestamp: 2014-02-27 06:14:01

Version Info:
0: [No Data]

Trojan.Win32.Agent.nezvfi also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Fugrafa.2603
CAT-QuickHeal	Trojan.AgentPMF.S22454556
ALYac	Gen:Variant.Fugrafa.2603
Zillya	Trojan.Agent.Win32.461487
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 004ee7aa1 )
K7GW	Trojan ( 004ee7aa1 )
Cybereason	malicious.41e012
Cyren	W32/S-e80efe08!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	Win32/Mira.A
APEX	Malicious
ClamAV	Win.Malware.Mira-6717565-0
Kaspersky	Trojan.Win32.Agent.nezvfi
BitDefender	Gen:Variant.Fugrafa.2603
NANO-Antivirus	Trojan.Win32.Agent.cwujnu
Tencent	Trojan.Win32.BitCoinMiner.la
Ad-Aware	Gen:Variant.Fugrafa.2603
Emsisoft	Gen:Variant.Fugrafa.2603 (B)
Comodo	Worm.Win32.Mira.SG@72k617
DrWeb	Trojan.MulDrop5.38532
McAfee-GW-Edition	BehavesLike.Win32.Generic.lh
FireEye	Generic.mg.1025cd641e012887
Sophos	Mal/Generic-R + W32/Mira-B
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Fugrafa.2603
Jiangmin	Trojan/Agent.ifmg
Antiy-AVL	Trojan/Generic.ASBOL.EBF
Microsoft	Worm:Win32/Mira!rfn
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	GenericRXEP-DP!1025CD641E01
MAX	malware (ai score=82)
VBA32	Trojan.Agent
Malwarebytes	Malware.AI.1370145397
Rising	Worm.Win32.Mira.a (CLASSIC)
Ikarus	Trojan.Generic36.IQA
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Mira.9C5!tr
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Trojan.Win32.Agent.nezvfi?

Trojan.Win32.Agent.nezvfi removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X