Win32/Agent.AAGJ removal tips

The Win32/Agent.AAGJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent.AAGJ virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32/Agent.AAGJ?


File Info:
name: F6D9AB2124BEA3B44865.mlw
path: /opt/CAPEv2/storage/binaries/6225e067639ffa2b175b3d57222354113cc39caa7f19b5d2e1fd9a48966f83c6
crc32: 66308ACD
md5: f6d9ab2124bea3b44865ea5edb167baf
sha1: 66980e576d2f218fe701e03d71d83aaf2f0678f4
sha256: 6225e067639ffa2b175b3d57222354113cc39caa7f19b5d2e1fd9a48966f83c6
sha512: 7178536fec5be56f553fec4eb9304532ba9a72469e6a2c2507f9a8a84888eec61af50a99c564adce5c0e2a05adeee648cd9bab0e97e54af5b25a4328d4c692e0
ssdeep: 6144:AE/ob489vyHB178S/GWs4YoMIQcwmULVoWZYc:O96vpQe6zYc
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T181549626F360C855D5B9493288678EF41A24FC72DC946A6B67E83E0F3D32AD1EC1036D
sha3_384: a26fd6abd32a0424c509b8687af7d58be501288a18fcd3a91df03311cdbe8f940f5fcce74367db4a36948d4aededd4a7
ep_bytes: 558bec837d0c017505e858040000ff75
timestamp: 2019-01-17 11:42:22

Version Info:
0: [No Data]

Win32/Agent.AAGJ also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
Skyhigh	Artemis!Trojan
Sangfor	Trojan.Win32.CoinLoader.uvzup
CrowdStrike	win/malicious_confidence_70% (D)
Alibaba	Trojan:Win32/CoinLoader.534c86d5
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent.AAGJ
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Vejoxi.gen
Avast	Win32:MalwareX-gen [Trj]
Tencent	Win32.Trojan.Agen.Ogil
F-Secure	Trojan.TR/AD.CoinLoader.uvzup
FireEye	Generic.mg.f6d9ab2124bea3b4
Sophos	Mal/Generic-S
Ikarus	Trojan.CoinMiner
Webroot	W32.Trojan.Gen
Google	Detected
Avira	TR/AD.CoinLoader.uvzup
Microsoft	Trojan:Win32/Wacatac.B!ml
Xcitium	Malware@#10ts3z67nreyt
ZoneAlarm	HEUR:Trojan.Win32.Vejoxi.gen
McAfee	Artemis!F6D9AB2124BE
Panda	Trj/CI.A
Rising	Trojan.Generic@AI.83 (RDML:9mwO0sfCvwBdNAHwaXKOZw)
MaxSecure	Trojan.Malware.74111747.susgen
Fortinet	W32/Agent.AAGJ!tr
BitDefenderTheta	Gen:NN.ZedlaF.36680.sy4@a89PVlni
AVG	Win32:MalwareX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Win32/Agent.AAGJ?

Win32/Agent.AAGJ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X