Trojan

About “Trojan.Win32.Agentb.jlnz” infection

Malware Removal

The Trojan.Win32.Agentb.jlnz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Agentb.jlnz virus can do?

  • Executable code extraction
  • Creates RWX memory
  • At least one IP Address, Domain, or File Name was found in a crypto call
  • Expresses interest in specific running processes
  • Reads data out of its own binary image
  • A process created a hidden window
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Trojan.Win32.Agentb.jlnz?


File Info:

crc32: 0D3F379B
md5: 2463b106318d4e5af6778088c8a47691
name: 2463B106318D4E5AF6778088C8A47691.mlw
sha1: 00e469b58d77054b1ec5bcb9cafb8430b5181a00
sha256: 24c2f1ee95b5743b15bfd8d59f191ddb5015f7556fa7937e1cbb1bc486ca132f
sha512: 9f6b0335f0f3b08ff3b8f99124c724ea45b41ee5f0afb48d26fd697d105bb91994f122ce17082637a23e1777d2c4aacfca672d90636d1900cb9a794a78cab46e
ssdeep: 24576:6DM7mBoORCh4SlkTCXFECJu/wRln2Ov1STkk:9Uo7ySlxFEYuM
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Win32.Agentb.jlnz also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0052c10d1 )
LionicTrojan.Win32.Agentb.tr2z
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Panda.13229
ClamAVWin.Coinminer.Generic-7151253-0
CAT-QuickHealTrojan.Mauvaise.SL1
ALYacGen:Heur.Mint.Zard.25
MalwarebytesTrojan.BitCoinMiner
ZillyaTrojan.CoinMiner.Win32.17365
SangforTrojan.Win32.Razy.415792
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/CoinMiner.5aa74338
K7GWTrojan ( 0052c10d1 )
Cybereasonmalicious.6318d4
CyrenW32/S-e12d2ca0!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/CoinMiner.BEX
APEXMalicious
AvastWin32:CoinminerX-gen [Trj]
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Agentb.jlnz
BitDefenderGen:Heur.Mint.Zard.25
NANO-AntivirusRiskware.Win32.BitMiner.fjekqm
MicroWorld-eScanGen:Heur.Mint.Zard.25
TencentMalware.Win32.Gencirc.10b3b4df
Ad-AwareGen:Heur.Mint.Zard.25
SophosMal/Generic-S + Mal/Miner-AU
ComodoApplication.Win32.CoinMiner.BEX@7pt9re
BitDefenderThetaAI:Packer.FF46866C1E
VIPRETrojan.Win32.Generic!BT
TrendMicroCoinminer_MALXMR.SM4-WIN32
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
FireEyeGeneric.mg.2463b106318d4e5a
EmsisoftGen:Heur.Mint.Zard.25 (B)
SentinelOneStatic AI – Malicious PE
JiangminRiskTool.BitMiner.bjtv
WebrootW32.Trojan.Gen
AviraTR/ATRAPS.Gen
eGambitUnsafe.AI_Score_97%
Antiy-AVLTrojan/Generic.ASMalwS.288DC96
KingsoftWin32.Troj.Generic_a.a.(kcloud)
MicrosoftTrojan:Win32/CoinMiner.BW!bit
SUPERAntiSpywareTrojan.Agent/Gen-CoinMiner
GDataGen:Heur.Mint.Zard.25
AhnLab-V3Unwanted/Win32.CoinMiner.R239539
Acronissuspicious
McAfeeGenericRXGO-ZD!2463B106318D
MAXmalware (ai score=100)
VBA32BScope.Trojan.BtcMine
PandaTrj/Genetic.gen
TrendMicro-HouseCallCoinminer_MALXMR.SM4-WIN32
RisingTrojan.Generic@ML.100 (RDML:PtFKm4O9JTNUGih8r0EJtg)
YandexTrojan.GenAsa!bNe2xAxJt+s
IkarusTrojan.Win32.CoinMiner
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/CoinMiner.BHW!tr
AVGWin32:CoinminerX-gen [Trj]
Paloaltogeneric.ml

How to remove Trojan.Win32.Agentb.jlnz?

Trojan.Win32.Agentb.jlnz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment