Trojan

Should I remove “TrojanDownloader:Win32/SmallAgent!atmn”?

Malware Removal

The TrojanDownloader:Win32/SmallAgent!atmn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanDownloader:Win32/SmallAgent!atmn virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine TrojanDownloader:Win32/SmallAgent!atmn?


File Info:

crc32: 1A4A8C24
md5: c8d9e183b79f9d564e62de43b5652bc4
name: C8D9E183B79F9D564E62DE43B5652BC4.mlw
sha1: 3bf97e2c126da8c650d5ccf5d855bcc9388a5249
sha256: 37340785e72d9ecb251e4a5367e9883e6b40bc203ece865e6ef2660eaa0d53f1
sha512: be76e50c01a7732a3a66e3e9f8dc094aac4c706e172ba5279e8b794f8f2d870e23e2b98ce8624353995f12f4786f5bbe65e83f3bba441475e59e1b18ba79eaef
ssdeep: 24576:Rf14ZjkEPSsM4w0sVMlB1FuPnYoCqyR9AgzaZteBPnFDB:RDErM4wNV4B1IfzC59AgDBPFN
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

TrojanDownloader:Win32/SmallAgent!atmn also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Heur.Mint.Zard.39
FireEyeGeneric.mg.c8d9e183b79f9d56
McAfeeArtemis!C8D9E183B79F
CylanceUnsafe
K7AntiVirusVirus ( 0055485e1 )
BitDefenderGen:Heur.Mint.Zard.39
K7GWVirus ( 0055485e1 )
CyrenW32/Agent.BFH.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Evo-gen [Susp]
KasperskyTrojan.Win32.Patched.rw
NANO-AntivirusVirus.Win32.Gen.ccmw
RisingWorm.Phorpiex!1.BB1C (CLASSIC)
Ad-AwareGen:Heur.Mint.Zard.39
TACHYONWorm/W32.ZeroDownloader
EmsisoftGen:Heur.Mint.Zard.39 (B)
F-SecureMalware.W32/Infector.Gen
DrWebTrojan.DownLoader33.36265
TrendMicroTROJ_GEN.R007C0DLM20
McAfee-GW-EditionArtemis!Trojan
MaxSecureTrojan.Malware.121218.susgen
SophosMal/Generic-R + Mal/Behav-362
JiangminTrojanDownloader.Generic.beop
AviraW32/Infector.Gen
KingsoftWin32.Infected.AutoInfector.a.(kcloud)
MicrosoftTrojanDownloader:Win32/SmallAgent!atmn
GridinsoftTrojan.Heur!.02212120
ArcabitTrojan.Mint.Zard.39
ZoneAlarmTrojan.Win32.Patched.rw
GDataGen:Heur.Mint.Zard.39
CynetMalicious (score: 90)
AhnLab-V3Malware/Win32.RL_Generic.R282625
VBA32BScope.TrojanBanker.CliptoShuffler
ALYacGen:Heur.Mint.Zard.39
MAXmalware (ai score=84)
ESET-NOD32a variant of Win32/TrojanDownloader.Agent.EQH
TrendMicro-HouseCallTROJ_GEN.R007C0DLM20
TencentWin32.Trojan.Patched.Tbin
IkarusTrojan-Downloader.Win32.Agent
FortinetW64/Agent.HI!tr
AVGFileRepMalware
Qihoo-360HEUR/QVM39.1.251F.Malware.Gen

How to remove TrojanDownloader:Win32/SmallAgent!atmn?

TrojanDownloader:Win32/SmallAgent!atmn removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment