Trojan

Win32/TrojanDownloader.Agent.EET removal guide

Malware Removal

The Win32/TrojanDownloader.Agent.EET is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/TrojanDownloader.Agent.EET virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz
s3.amazonaws.com
ocsp.digicert.com
crl3.digicert.com
s3.us-east-2.amazonaws.com

How to determine Win32/TrojanDownloader.Agent.EET?


File Info:

crc32: C3F67131
md5: 75fb735b89a430553dde2e1773b1d04e
name: 75FB735B89A430553DDE2E1773B1D04E.mlw
sha1: 953b11097b92bcac2d6643aad2e945fe6930268a
sha256: 1de77241217a98961940a341bbbba31e79cf15e82ebf321e06276a3322b69745
sha512: a03abff44771a379dfe39803e82fbe6af1ee77ec777ca2a8cac7cea17c89138126f9aa6edc311771f44a3a64e931e00193ff40d1d464560245f61fbe03d57ff3
ssdeep: 24576:jG9jlKKJGs1Co/rX0RcNu84qdylAqvTT3gXq:SPyXVqvITwa
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/TrojanDownloader.Agent.EET also known as:

K7AntiVirusTrojan-Downloader ( 005705901 )
LionicTrojan.Win32.Foreign.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
ALYacTrojan.GenericKD.40514466
CylanceUnsafe
ZillyaDownloader.Agent.Win32.371762
SangforRansom.Win32.Foreign.obdj
AlibabaRansom:Win32/Foreign.462f6f16
K7GWTrojan-Downloader ( 005705901 )
Cybereasonmalicious.b89a43
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/TrojanDownloader.Agent.EET
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan-Ransom.Win32.Foreign.obdj
BitDefenderTrojan.GenericKD.40514466
NANO-AntivirusTrojan.Win32.RiskGen.fikytf
MicroWorld-eScanTrojan.GenericKD.40514466
TencentMalware.Win32.Gencirc.114d4eb1
Ad-AwareTrojan.GenericKD.40514466
SophosMal/Generic-S
ComodoMalware@#3h9hmq6mzd19s
BitDefenderThetaGen:NN.ZexaF.34266.7uW@a8MgaCgi
McAfee-GW-EditionBehavesLike.Win32.Dropper.dh
FireEyeGeneric.mg.75fb735b89a43055
EmsisoftTrojan.GenericKD.40514466 (B)
JiangminTrojan.Foreign.ezf
AviraHEUR/AGEN.1123947
Antiy-AVLTrojan/Generic.ASMalwS.281B302
MicrosoftTrojan:Win32/Occamy.C
ArcabitTrojan.Generic.D26A33A2
SUPERAntiSpywareTrojan.Agent/Generic
GDataTrojan.GenericKD.40514466
AhnLab-V3Malware/Win32.Generic.R238286
McAfeeArtemis!75FB735B89A4
MAXmalware (ai score=100)
VBA32TrojanRansom.Foreign
MalwarebytesTrojan.Downloader
PandaTrj/GdSda.A
RisingTrojan.Agent!1.B4F9 (CLASSIC)
YandexTrojan.GenAsa!cR9Uu23oKdk
IkarusTrojan-Downloader.Win32.Agent
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Win32/TrojanDownloader.Agent.EET?

Win32/TrojanDownloader.Agent.EET removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment