Categories: Trojan

What is “Win32/TrojanDownloader.Agent.DDF”?

The Win32/TrojanDownloader.Agent.DDF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanDownloader.Agent.DDF virus can do?

Injection (inter-process)
Injection (Process Hollowing)
Mimics the system’s user agent string for its own requests
The binary likely contains encrypted or compressed data.
Executed a process and injected code into it, probably while unpacking
A system process is generating network traffic likely as a result of process injection
Anomalous binary characteristics

How to determine Win32/TrojanDownloader.Agent.DDF?


File Info:
crc32: 59768884md5: 1aa36215f37ea6b2804d1e7955ef6633name: 1AA36215F37EA6B2804D1E7955EF6633.mlwsha1: 8cc686d4e5e4ea04b9934dc603e4608001bcf056sha256: 080a5b6721694210b395e88cdd6943b42c472e5f0a81088be361b6a05ab313f7sha512: 3e2557ac202a18a7a39ba2e02985ad1c87d6cf0694011267844ea5a34ffda7a8449bc568eb65727918b2540b4afafe9e71ba000bfdaa4ff73c3cbf1fda004e48ssdeep: 1536:ICGlJ9DJdddtJuxNUno8ddhYyYMdd2BddddddDddWD:IjJh7uxNUnoZyYtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/TrojanDownloader.Agent.DDF also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Riskware ( 0040eff71 )
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen7.10119
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.Generic
ALYac	Gen:Trojan.ExplorerHijack.dmW@a8tzD0p
Cylance	Unsafe
Zillya	Trojan.Generic.Win32.936961
Sangfor	Suspicious.Win32.Razy.117397
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanDownloader:Win32/EncPk.e27ea535
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.5f37ea
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.DDF
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	UDS:Trojan.Win32.Generic
BitDefender	Gen:Trojan.ExplorerHijack.dmW@a8tzD0p
NANO-Antivirus	Virus.Win32.Gen.ccmw
MicroWorld-eScan	Gen:Trojan.ExplorerHijack.dmW@a8tzD0p
Tencent	Win32.Trojan-downloader.Agent.Eanr
Ad-Aware	Gen:Trojan.ExplorerHijack.dmW@a8tzD0p
Sophos	Mal/Generic-R + Mal/EncPk-ND
Comodo	Malware@#11v0xax879ve9
BitDefenderTheta	Gen:NN.ZexaF.34266.dmW@a8tzD0p
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Trojan.Win32.IFAYS.A.hp
McAfee-GW-Edition	BehavesLike.Win32.Generic.kc
FireEye	Generic.mg.1aa36215f37ea6b2
Emsisoft	Gen:Trojan.ExplorerHijack.dmW@a8tzD0p (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Generic.arajw
Avira	TR/Crypt.ZPACK.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.1DF88B0
Microsoft	PWS:Win32/Zbot!ml
GData	Gen:Trojan.ExplorerHijack.dmW@a8tzD0p
AhnLab-V3	Malware/Win32.Generic.C1742881
Acronis	suspicious
McAfee	GenericRXIM-UC!1AA36215F37E
MAX	malware (ai score=89)
VBA32	Malware-Cryptor.Inject.gen.2
Malwarebytes	Spyware.InfoStealer
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Trojan.Win32.IFAYS.A.hp
Rising	Trojan.Generic@ML.100 (RDML:zUlV+WVjY42o2q1bGQS/ZA)
Yandex	Trojan.DL.Agent!ryL8nHpe7zg
Ikarus	Trojan-Downloader.Win32.Agent
Fortinet	W32/Generic.AC.3BFB96!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml