Trojan

TrojanDownloader:Win32/Sagnusnagta.A removal

Malware Removal

The TrojanDownloader:Win32/Sagnusnagta.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanDownloader:Win32/Sagnusnagta.A virus can do?

  • Authenticode signature is invalid
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Anomalous binary characteristics

How to determine TrojanDownloader:Win32/Sagnusnagta.A?


File Info:

name: 9735C6108F7E27523E8A.mlw
path: /opt/CAPEv2/storage/binaries/2600f07226ddebc2bd639a64aafd147840e0def580813947263f956c14b128ec
crc32: 439F5E8D
md5: 9735c6108f7e27523e8a2e29e46c58e1
sha1: dc0d7284d947a25a42461758384fb7f87280b31f
sha256: 2600f07226ddebc2bd639a64aafd147840e0def580813947263f956c14b128ec
sha512: 562f9c1e126f1c3b95fe590911b0b10b663cf748cae1103890b9f39e80902c838a03500bdaa72ed3a96cb80b54dadbe6cc2525037bb589b36e71ba660c2e9d0b
ssdeep: 96:qMCFwOAL5jwcKGCYeml6zqxH9c1r3Gu1flerV45a836wudJvKss3bDrw0/RCv8KS:qMeA0cRIexdcNfgFL2RE8eIBu7lR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T178121A02AC49C477D79A007552793EBBD555A924524B3E43BB44E8C1A272CA3F2FF11F
sha3_384: 46628feec60cc48e8b088218de7c2606284e963fadff2a35b0481ab97275075b64359e9fb7885be2ef4978d022f1d794
ep_bytes: ff15a410400033c0c210009090909090
timestamp: 2008-07-26 10:11:44

Version Info:

0: [No Data]

TrojanDownloader:Win32/Sagnusnagta.A also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Small.ltlB
MicroWorld-eScanTrojan.Downloader.VIA
FireEyeGeneric.mg.9735c6108f7e2752
SkyhighBehavesLike.Win32.Trojan.zh
McAfeeDownloader-BDH.b
Cylanceunsafe
VIPRETrojan.Downloader.VIA
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderTrojan.Downloader.VIA
K7GWTrojan-Downloader ( 004d21ec1 )
K7AntiVirusTrojan-Downloader ( 0051331c1 )
ArcabitTrojan.Downloader.VIA
VirITTrojan.Win32.Tiny.K
SymantecDownloader
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/TrojanDownloader.Small.OEZ
APEXMalicious
ClamAVWin.Downloader.53030-1
KasperskyTrojan.Win32.Fsysna.casp
AlibabaTrojanDownloader:Win32/Fsysna.9873d195
NANO-AntivirusTrojan.Win32.Small.vzjl
ViRobotTrojan.Win32.Downloader.9216.GQ
RisingTrojan.DL.Win32.Undef.aka (CLASSIC)
SophosMal/Generic-S
F-SecureWorm.WORM/Rbot.Gen
DrWebTrojan.DownLoad.3703
ZillyaDownloader.Small.Win32.11745
TrendMicroTROJ_SMALL.JTD
Trapminemalicious.high.ml.score
EmsisoftTrojan.Downloader.VIA (B)
IkarusTrojan-Downloader.Win32.Small
MAXmalware (ai score=100)
JiangminTrojanDownloader.Agent.aexg
WebrootW32.Malware.Downloader
GoogleDetected
AviraWORM/Rbot.Gen
VaristW32/Downldr2.DVGY
Antiy-AVLTrojan[Downloader]/Win32.Small
KingsoftWin32.Trojan.Fsysna.casp
XcitiumTrojWare.Win32.TrojanDownloader.Small.~PP@1h71o
MicrosoftTrojanDownloader:Win32/Sagnusnagta.A
ZoneAlarmTrojan.Win32.Fsysna.casp
GDataTrojan.Downloader.VIA
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Downloader.C24910
Acronissuspicious
BitDefenderThetaAI:Packer.7D2E16F61E
ALYacTrojan.Downloader.VIA
DeepInstinctMALICIOUS
VBA32BScope.Trojan.Downloader
MalwarebytesMalware.AI.2992335178
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_SMALL.JTD
TencentWin32.Worm.Rbot.Itgl
YandexTrojan.GenAsa!bEmYZMJpCsg
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.502356.susgen
FortinetW32/Small.BDH!tr.dldr
AVGWin32:DropperX-gen [Drp]
Cybereasonmalicious.4d947a
AvastWin32:DropperX-gen [Drp]

How to remove TrojanDownloader:Win32/Sagnusnagta.A?

TrojanDownloader:Win32/Sagnusnagta.A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment