Categories: Trojan

What is “Win32/TrojanDownloader.Agent.RLV”?

The Win32/TrojanDownloader.Agent.RLV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanDownloader.Agent.RLV virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Uses Windows utilities for basic functionality
Deletes its original binary from disk
Installs itself for autorun at Windows startup
Creates a hidden or system file
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/TrojanDownloader.Agent.RLV?


File Info:
crc32: 383B71C0md5: 58823fa0132bb50c3e7e9541b90ea1acname: 58823FA0132BB50C3E7E9541B90EA1AC.mlwsha1: 547c94b3dd7fba438ebdd7ab5cd1713c184e0812sha256: 5f3999df4e95caece565b7cc39b6fadf3d1a5ce7f84ee232d22b5041eacbafb7sha512: c851998b3b0529a98ad63f63884bb50804929ed18a444eeb2ba09a0707f6b22ecc4b3de03ecb6ed5167274f2c749af60cf518b44c94ffb38ad69fbe1811e7ab5ssdeep: 384:El5xJCJSxyJzTI1xz5yJg+xBjxAiqCCt1QE7WbZ9C/Jc:+5OJSEJzsWVxBjXqCCzQQWbZ9C/Jctype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/TrojanDownloader.Agent.RLV also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan-Downloader ( 0055e3da1 )
Lionic	Trojan.Win32.Agent.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Click.24635
ALYac	Gen:Trojan.ShellHook.bqW@ampezvmb
Malwarebytes	MachineLearning/Anomalous.100%
CrowdStrike	win/malicious_confidence_90% (D)
Alibaba	TrojanDownloader:Win32/ATRAPS.0d7926d8
K7GW	Trojan-Downloader ( 0055e3da1 )
Cybereason	malicious.0132bb
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.RLV
APEX	Malicious
Avast	Win32:Trojan-gen
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Agent.bqqt
BitDefender	Gen:Trojan.ShellHook.bqW@ampezvmb
NANO-Antivirus	Trojan.Win32.Agent.cwnfsu
MicroWorld-eScan	Gen:Trojan.ShellHook.bqW@ampezvmb
Tencent	Win32.Trojan.Agent.Swus
Ad-Aware	Gen:Trojan.ShellHook.bqW@ampezvmb
Sophos	Mal/Generic-S
Comodo	Malware@#3n51h69yezw98
BitDefenderTheta	AI:Packer.31C3FCF51C
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0OGN21
McAfee-GW-Edition	RDN/Generic.dx!bdwr
FireEye	Generic.mg.58823fa0132bb50c
Emsisoft	Gen:Trojan.ShellHook.bqW@ampezvmb (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/PSW.OnlineGames.Gen
Avira	TR/ATRAPS.Gen
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.187AD3C
Microsoft	Trojan:Win32/Occamy.C
GData	Gen:Trojan.ShellHook.bqW@ampezvmb
McAfee	Artemis!58823FA0132B
MAX	malware (ai score=100)
VBA32	Trojan.Agent
Panda	Generic Suspicious
TrendMicro-HouseCall	TROJ_GEN.R002C0OGN21
Rising	Trojan.Clicker.Win32.Agent.eez (CLASSIC)
Yandex	Trojan.GenAsa!DI2tJ9LAHy4
Fortinet	W32/Generic.AC.2FFB66!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml