Win32/TrojanDownloader.Agent.GZX removal guide

The Win32/TrojanDownloader.Agent.GZX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/TrojanDownloader.Agent.GZX virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Attempts to modify proxy settings

How to determine Win32/TrojanDownloader.Agent.GZX?


File Info:
name: 7B660C0EE8434B14CAEE.mlw
path: /opt/CAPEv2/storage/binaries/8b7fbdc043fcefcf254aa662a61375d6c2aac2c83864add093c2c87872f8ebd0
crc32: 1EC23F06
md5: 7b660c0ee8434b14caee1799177c8231
sha1: 3e7676da5c3e0b383151e0c02525dfb020961e56
sha256: 8b7fbdc043fcefcf254aa662a61375d6c2aac2c83864add093c2c87872f8ebd0
sha512: 61f6fdc0116625bc97b7b6ea2d3c11c3b80fa4006507dd07273ff7b8a1b2030e493313ee0dda28502a691466bc19d7ee5405f54a122b68f15a87a592ba59855c
ssdeep: 768:T4yqbf1cciNhGi9hQT3ipoNXIOaPk8EDS3un7rRmNgXaaxpNrTC/:T4yqjo+3ip2IlPJIB5jrTC
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D6334B21F2E1C035D492593444B69671593ABD23C7BA469B7BC43FBE1E723E09E3432A
sha3_384: e94c2e030d7ffd632002b745902961e718bafbabf65dd22ed528c6eeaa3ee766a4c0e131b5790d212d6aa618a0d1d78a
ep_bytes: e882130000e995feffff3b0d50a04000
timestamp: 2023-09-06 14:56:01

Version Info:
CompanyName: 
FileDescription: GoldView MFC Application
FileVersion: 1, 0, 0, 1
InternalName: GoldView
LegalCopyright: Copyright (C) 2005
LegalTrademarks: 
OriginalFilename: GoldView.EXE
ProductName: GoldView Application
ProductVersion: 1, 0, 0, 1
Translation: 0x0409 0x04b0

Win32/TrojanDownloader.Agent.GZX also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
FireEye	Generic.mg.7b660c0ee8434b14
CrowdStrike	win/malicious_confidence_90% (D)
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.GZX
APEX	Malicious
Cynet	Malicious (score: 100)
Trapmine	suspicious.low.ml.score
Microsoft	Trojan:Win32/Wacatac.B!ml
VBA32	suspected of Trojan.Downloader.gen
Rising	Trojan.Generic@AI.100 (RDML:cRvjEXlW4pGNZt7O4ue/Fg)
SentinelOne	Static AI – Suspicious PE
BitDefenderTheta	Gen:NN.ZexaF.36662.du0@a4y2tHpj
DeepInstinct	MALICIOUS

How to remove Win32/TrojanDownloader.Agent.GZX?

Win32/TrojanDownloader.Agent.GZX removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X