Win32/Agent.TNE removal

The Win32/Agent.TNE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent.TNE virus can do?

Unconventionial language used in binary resources: Turkish
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Win32/Agent.TNE?


File Info:
name: 6DA9238E0C05B7637B09.mlw
path: /opt/CAPEv2/storage/binaries/3e9e9e74cb3d2d8b71ffa7405f5322fa22b10a241232a9ece5b5e57d5bfcb1e5
crc32: 71F6D4C5
md5: 6da9238e0c05b7637b09e6767bb7d7e0
sha1: b5d533f9beb8f258b4063e5936aa108b90db1079
sha256: 3e9e9e74cb3d2d8b71ffa7405f5322fa22b10a241232a9ece5b5e57d5bfcb1e5
sha512: 594773ea53c39551a78050adac262e3c2373071ac809c1684da8c4c92e87ac147fffaf304d85cc22a016571bcdb96dc33b41e4845402bee850d349dc34ffab91
ssdeep: 1536:ArXXBhCQCo4mFVsIgvo3X4iZpTha5VlA8mq7wAuhsyGdR:mX7ymFmIgvo4iZhha5r7wAuhEdR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B0941920E700D02AEC9122BBD1E68776BD342E305B1550F3EFE6E99ED6352F1B63154A
sha3_384: b216f688790516528594be416be459bdd516940ee7678f153331cd5236f5e0b0028e977b6d1aefdf2f5c72bc82bdcf93
timestamp: 2013-01-15 22:17:05

Version Info:
Comments: 
CompanyName: 
FileDescription: 
FileVersion: 6.0.150.3
InternalName: jusched
LegalCopyright: Copyright © 2011
LegalTrademarks: 
OriginalFilename: jusched
PrivateBuild: Sun Microsystems, Inc.
ProductName: Java(TM) Platform SE 6 U15
ProductVersion: 6.0.150.3
SpecialBuild: 
Translation: 0x0000 0x04b0

Win32/Agent.TNE also known as:

Bkav	W32.AIDetectMalware
AVG	Win32:Agent-APNJ [Trj]
Elastic	malicious (moderate confidence)
DrWeb	Trojan.Siggen3.51589
FireEye	Generic.mg.6da9238e0c05b763
Skyhigh	GenericRXEP-ZU!6DA9238E0C05
McAfee	GenericRXEP-ZU!6DA9238E0C05
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Suspicious.Win32.Save.ins
K7GW	Unwanted-Program ( 0059886f1 )
K7AntiVirus	Unwanted-Program ( 0059886f1 )
Symantec	SMG.Heur!gen
ESET-NOD32	a variant of Win32/Agent.TNE
Cynet	Malicious (score: 100)
APEX	Malicious
Avast	Win32:Agent-APNJ [Trj]
ClamAV	Win.Trojan.BankerSpy-1
Tencent	Worm.Win32.Juched.ha
Baidu	Win32.Trojan.Agent.dc
Trapmine	malicious.high.ml.score
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.Win32.Webprefix
GData	Win32.Trojan.Agent.92EDD2
Webroot	W32.Trojan.Gen
Varist	W32/Kryptik.LZQ.gen!Eldorado
Antiy-AVL	Trojan/Win32.Agent.a
Kingsoft	malware.kb.b.927
Microsoft	Worm:Win32/Ganelp!pz
Google	Detected
Cylance	unsafe
Rising	Trojan.Agent!1.C135 (CLASSIC)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Agent.TNE!tr
DeepInstinct	MALICIOUS
alibabacloud	Worm:Win/Ganelp

How to remove Win32/Agent.TNE?

Win32/Agent.TNE removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X