Categories: Trojan

How to remove “Win32/TrojanDownloader.Agent.NGE”?

The Win32/TrojanDownloader.Agent.NGE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanDownloader.Agent.NGE virus can do?

Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
A process attempted to delay the analysis task.
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Executed a process and injected code into it, probably while unpacking

How to determine Win32/TrojanDownloader.Agent.NGE?


File Info:
crc32: 7FF51222md5: 50845772be3bfbf1dcc0f4aa7365069aname: 50845772BE3BFBF1DCC0F4AA7365069A.mlwsha1: dc41f533d1a3eec1be0587563112ee837dce81e0sha256: f8f483ab933242a03e955da435461f4844729cb3a1c378379ec5897fe5416e27sha512: 19cf786cc174a34a42269bd93f15a8914294a2b7faf0fbff6d1949182f7d284a398c8951b55cfc38c816ba10b389236e38ed292cbe477663741ed410e306c466ssdeep: 384:iUHoiVaKR4Ggb78vx8aMibhypy08m9Bp7SaWk/Jh96lo:iUH5a5b78p8DilYR8CpunwJhBtype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
0: [No Data]

Win32/TrojanDownloader.Agent.NGE also known as:

Bkav	W32.AIDetectVM.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Zlob.1.Gen
FireEye	Generic.mg.50845772be3bfbf1
ALYac	Trojan.Zlob.1.Gen
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Obfuscated.a!c
Sangfor	Malware
K7AntiVirus	Trojan ( 0040f8b51 )
BitDefender	Trojan.Zlob.1.Gen
K7GW	Trojan ( 0040f8b51 )
Cybereason	malicious.2be3bf
Baidu	Win32.Trojan-Downloader.Agent.ir
Cyren	W32/Downloader.YJVM-8732
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	FileRepMalware
ClamAV	Win.Downloader.42534-1
Kaspersky	Trojan-Downloader.Win32.Obfuscated.aa
Alibaba	TrojanDownloader:Win32/Obfuscated.0b142c75
NANO-Antivirus	Trojan.Win32.Crypt.mxjz
ViRobot	Trojan.Win32.Downloader.30492
Tencent	Win32.Trojan-downloader.Obfuscated.Stua
Ad-Aware	Trojan.Zlob.1.Gen
Sophos	ML/PE-A + Troj/Dloadr-AKJ
Comodo	TrojWare.Win32.TrojanDownloader.Agent.NGE@2496
F-Secure	Trojan.TR/Downloader.Gen
DrWeb	Trojan.DownLoader.11346
Zillya	Downloader.Obfuscated.Win32.3360
TrendMicro	TROJ_HORST.NZ
McAfee-GW-Edition	BehavesLike.Win32.Dropper.mh
CMC	Generic.Win32.50845772be!MD
Emsisoft	Trojan.Zlob.1.Gen (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanDownloader.Obfuscated.cui
Webroot	W32.Backdoor.Gen
Avira	TR/Downloader.Gen
eGambit	Unsafe.AI_Score_98%
Antiy-AVL	Trojan[Downloader]/Win32.Obfuscated
Kingsoft	Win32.Heur.KVMH008.a.(kcloud)
Microsoft	TrojanDownloader:Win32/Small
Arcabit	Trojan.Zlob.1.Gen
ZoneAlarm	Trojan-Downloader.Win32.Obfuscated.aa
GData	Trojan.Zlob.1.Gen
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Horst.C69247
Acronis	suspicious
McAfee	generic!bg.ftt
MAX	malware (ai score=100)
VBA32	BScope.TrojanDownloader.Horst
Malwarebytes	Malware.Heuristic.1003
Panda	Trj/Rizalof.JKH
ESET-NOD32	Win32/TrojanDownloader.Agent.NGE
TrendMicro-HouseCall	TROJ_HORST.NZ
Rising	Trojan.DL.Win32.Agent.aiq (TFE:5:TjOEzEdF4dN)
Yandex	Trojan.GenAsa!KmmlnF+4yZc
Ikarus	Trojan-Proxy.Win32.Horst
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Generic.AC.218C6E!tr
BitDefenderTheta	AI:Packer.4486508B1D
AVG	FileRepMalware
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	Win32/Trojan.Zlob.HwsBh4sA