Win32/Agent.SNX information

The Win32/Agent.SNX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent.SNX virus can do?

Unconventionial binary language: Arabic (Algeria)
Unconventionial language used in binary resources: Arabic (Yemen)
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/Agent.SNX?


File Info:
crc32: 0F9C9481
md5: bf0b2c001452669173c7cec980ad365b
name: BF0B2C001452669173C7CEC980AD365B.mlw
sha1: 5edec0b33fd4e0ebd0306d743e170005811f6217
sha256: af317ce588608fab46d15dd2f5e20d29d874e9933bc70e42931db903a08e4764
sha512: 3fe610d5d6a506e9f6207d5b9cc8bc46986fb260d10f838854e6fe1bf1605118fc22e5a170fc987d84c7e79fb7eef85529c318b17af9d1458216d32c63a6f9a1
ssdeep: 98304:KsVXH2gbTfJi2plgyRsVXH2gbTfJi2plgy:KstH2g/JlVstH2g/Jl
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: PRINTCONFIG.DLL
FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 10.0.17134.1
FileDescription: x648x627x62cx647x629 x645x633x62ax62ex62fx645 PrintConfig
OriginalFilename: PRINTCONFIG.DLL
Translation: 0x0401 0x04b0

Win32/Agent.SNX also known as:

DrWeb	Trojan.Click3.29339
MicroWorld-eScan	Trojan.GenericKD.45798479
CAT-QuickHeal	Trojan.GenericIH.S20203434
McAfee	GenericRXAA-AA!BA2FA079FAE5
Zillya	Dropper.Agent.Win32.443301
Cyren	W32/Agent.CGR.gen!Eldorado
ESET-NOD32	a variant of Win32/Agent.SNX
Avast	Win32:Trojan-gen
ClamAV	Win.Malware.Fileinfector-9834127-0
Kaspersky	HEUR:Trojan-Dropper.Win32.Agent.gen
BitDefender	Trojan.GenericKD.45798479
NANO-Antivirus	Trojan.Win32.Clicker.dapdse
Sophos	Mal/Generic-S + Troj/Agent-BGMO
BitDefenderTheta	Gen:NN.ZexaF.34126.amGfa0A48Fd
McAfee-GW-Edition	GenericRXNT-WU!D20F65DE5022
FireEye	Trojan.GenericKD.45798479
Emsisoft	Trojan.GenericKD.45798479 (B)
Microsoft	Trojan:Win32/Ymacco.AADC
ZoneAlarm	HEUR:Trojan-Dropper.Win32.Agent.gen
GData	Win32.Trojan.PSE.1H0QC1L
AhnLab-V3	Trojan/Win.WU.C4622904
VBA32	Trojan.Click
MAX	malware (ai score=85)
Rising	Trojan.Kryptik!1.D30B (CLASSIC)
Yandex	Trojan.Agent!sDgRjKyvUDs
Ikarus	Trojan.Win32.Genome
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.CGR!tr
AVG	Win32:Trojan-gen

How to remove Win32/Agent.SNX?

Win32/Agent.SNX removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X