Trojan

About “Win32/TrojanDownloader.Agent.GEM” infection

Malware Removal

The Win32/TrojanDownloader.Agent.GEM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Win32/TrojanDownloader.Agent.GEM virus can do?

  • At least one process apparently crashed during execution
  • Authenticode signature is invalid

How to determine Win32/TrojanDownloader.Agent.GEM?



File Info:

name: 5985D84FF0C5986E4374.mlw
path: /opt/CAPEv2/storage/binaries/a2f0928fcda8ea432338ad1e369ca93e950814fc1ddf0312967bd49b69467a16
crc32: BF5CD3B8
md5: 5985d84ff0c5986e43745934a8f83fd5
sha1: e5faaa3c792a8656ceaa4f014c5ed214ed54f469
sha256: a2f0928fcda8ea432338ad1e369ca93e950814fc1ddf0312967bd49b69467a16
sha512: afdf2133aeddf9dd91a49faee6cf61f773194cc1c82a68a128cad41046dd8d1cefc918bfa99698bcb9c6199b0d19bcf328d77250b68c9168b177fa62b8471783
ssdeep: 1536:ZgS4NZWGJcRp4GaIG5xTjEDD+0gPyQxLm:ZgtNZpJcaIGzTjJPyQQ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14F938C1276D1E071D4B6063158A88F639A7EBE365BB184D7B3E8254E4EB01C35B3B363
sha3_384: b88af71241b7cc405a8c7fdfc01aaa44ebcd04d48ef4ee2b931fb6669cbb6f4a9381c2c56af01e0ed3b59beb9912db5e
ep_bytes: e89a3e0000e9000000006a1468103841
timestamp: 2022-04-14 08:56:12


Version Info:

0: [No Data]

Win32/TrojanDownloader.Agent.GEM also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Bqhatdci.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Siggen17.40064
MicroWorld-eScanGen:Trojan.Heur.RP.fuW@bqhAtdci
FireEyeGeneric.mg.5985d84ff0c5986e
ALYacTrojan.Agent.45056D
CylanceUnsafe
K7AntiVirusTrojan-Downloader ( 0058fe381 )
AlibabaTrojanDownloader:Win32/DropperX.cbb16423
K7GWTrojan-Downloader ( 0058fe381 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaAI:Packer.6444E8661F
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/TrojanDownloader.Agent.GEM
TrendMicro-HouseCallTROJ_GEN.R002C0PDI22
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-Downloader.Win32.Agent.gen
BitDefenderGen:Trojan.Heur.RP.fuW@bqhAtdci
AvastWin32:DropperX-gen [Drp]
TencentWin32.Trojan-downloader.Agent.Sxer
Ad-AwareGen:Trojan.Heur.RP.fuW@bqhAtdci
EmsisoftGen:Trojan.Heur.RP.fuW@bqhAtdci (B)
TrendMicroTROJ_GEN.R002C0PDI22
McAfee-GW-EditionBehavesLike.Win32.Generic.nm
SophosMal/Generic-S + Mal/Behav-116
JiangminTrojanDownloader.Agent.gbqj
AviraTR/Dldr.Agent.ykrst
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataGen:Trojan.Heur.RP.fuW@bqhAtdci
AhnLab-V3Win-Trojan/Gandcrab08.Exp
Acronissuspicious
McAfeeRDN/Generic Downloader.x
MAXmalware (ai score=80)
VBA32BScope.Trojan.Agent
MalwarebytesMalware.Heuristic.1006
APEXMalicious
RisingTrojan.Generic@AI.96 (RDML:G/1ivgVLzyOrnCB1QO665w)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.159307690.susgen
FortinetW32/Agent.GEM!tr.dldr
AVGWin32:DropperX-gen [Drp]
Cybereasonmalicious.ff0c59

How to remove Win32/TrojanDownloader.Agent.GEM?

Win32/TrojanDownloader.Agent.GEM removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment