Win32/TrojanDownloader.Agent_AGen.ES removal

The Win32/TrojanDownloader.Agent_AGen.ES is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/TrojanDownloader.Agent_AGen.ES virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Authenticode signature is invalid

How to determine Win32/TrojanDownloader.Agent_AGen.ES?


File Info:
name: A6853DC289619B51EDBD.mlw
path: /opt/CAPEv2/storage/binaries/cae41e79944ee7c67f02b8e8d26e7b6451ecf7260d2be1ee47d5b641c7be9e92
crc32: C18891FB
md5: a6853dc289619b51edbd5162f9e42169
sha1: 8bded9f2885049b695ecd8ea1af16915d7c17d0e
sha256: cae41e79944ee7c67f02b8e8d26e7b6451ecf7260d2be1ee47d5b641c7be9e92
sha512: cc65314594aeb52687c3b173a68f4876aeb7eb81e7e3ab18a9e4f73cbed11dba2efd3e00a5f823ed9ead4d39302180a36ced73440fa559b4e2ca5782d2748948
ssdeep: 6144:4B8BqnD2xsILYMOG1PiSt8IY59cDqyWlz8Ix2TyGOdZkWTRX8:4ZD2xsILYqUSthYfcDqyqzZ2TsTRX8
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1E064AE6237E0D8F6F9824A330AD4FEA467FED6910E181E6F33D427191F70691A625C1E
sha3_384: 6c7e097e8c1f008123f0ddf975bb5419153f02b007f4cc700e56008136bfa30bfb46efb5185721f32bafd88ce773552e
ep_bytes: e86f070000e974feffff8b4df464890d
timestamp: 2023-10-02 09:04:37

Version Info:
0: [No Data]

Win32/TrojanDownloader.Agent_AGen.ES also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
DrWeb	Trojan.Inject4.61655
FireEye	Generic.mg.a6853dc289619b51
K7AntiVirus	Trojan ( 005abe3f1 )
K7GW	Trojan ( 005abe3f1 )
CrowdStrike	win/malicious_confidence_90% (D)
BitDefenderTheta	Gen:NN.ZexaF.36738.tqY@aOIJIVd
Cyren	W32/Kryptik.KTF.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent_AGen.ES
APEX	Malicious
ClamAV	Win.Trojan.Stealerc-10009069-0
Kaspersky	HEUR:Trojan-PSW.Win32.Stealerc.gen
Rising	Trojan.Generic@AI.80 (RDML:MxrWpJGdrKT25/ylOTYLmA)
Trapmine	malicious.moderate.ml.score
Google	Detected
Antiy-AVL	Trojan[Spy]/Win32.Stealer
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
ZoneAlarm	HEUR:Trojan-PSW.Win32.Stealerc.gen
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.TrickBot.R608905
MAX	malware (ai score=80)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Kryptik.HUTD!tr
AVG	Win32:PWSX-gen [Trj]
Avast	Win32:PWSX-gen [Trj]

How to remove Win32/TrojanDownloader.Agent_AGen.ES?

Win32/TrojanDownloader.Agent_AGen.ES removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X