About “Win32/TrojanDownloader.Zlob_AGen.B” infection

The Win32/TrojanDownloader.Zlob_AGen.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/TrojanDownloader.Zlob_AGen.B virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Win32/TrojanDownloader.Zlob_AGen.B?


File Info:
name: 7FFA1E60F32E0767D376.mlw
path: /opt/CAPEv2/storage/binaries/a7e36acbf5efe788a5c100b2682d1935028f0e54290a864d915408c3a09b8139
crc32: 76F10991
md5: 7ffa1e60f32e0767d376b71a86c099b4
sha1: 46e636a4b647f95ab3fd04f468b78a84cba55ee5
sha256: a7e36acbf5efe788a5c100b2682d1935028f0e54290a864d915408c3a09b8139
sha512: 4a2feddaa788cd7c02ccde8a1e58855508f43e25e07e902b40f3efaaf145a2ca652947ba9c738296c7d2df86dad466774aa97b8247e3f24b87bbfa3c63e56cfb
ssdeep: 1536:qb+Cd4Q3ece1YMugSs8/5kvJzhw+r+lmc4Csgh9vGrt7JrlO/TBpd:qbB4Q3gY/Xkv5hwihyvatRl2F
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18F838E63B88544B7D693013115A46B34F7FF6B386935DCA7CB1819C6AC794C2B23B2CA
sha3_384: 17904bf193eaafa94f54e79cde7a2975876ed24bd144c08739af729ca1dbbad540940b0af6c7017e2df67de9b1e22e9c
ep_bytes: 8536a036bd36d636e5360c372e373f37
timestamp: 2007-10-18 14:16:12

Version Info:
0: [No Data]

Win32/TrojanDownloader.Zlob_AGen.B also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.DNSChanger.kZ16
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Heur.Conjar.9
ClamAV	Win.Malware.Conjar-9957981-0
FireEye	Generic.mg.7ffa1e60f32e0767
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Gen:Heur.Conjar.9
Sangfor	Suspicious.Win32.Save.a
Alibaba	Trojan:Win32/DNSChanger.7adcaf74
Cybereason	malicious.0f32e0
BitDefenderTheta	Gen:NN.ZexaF.36250.feX@ayc4eho
Cyren	W32/Trojan2.NNZ
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanDownloader.Zlob_AGen.B
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.DNSChanger.acs
BitDefender	Gen:Heur.Conjar.9
SUPERAntiSpyware	Trojan.Unclassified/K-Series-A
Avast	Win32:DNSChanger-TL [Trj]
Tencent	Malware.Win32.Gencirc.13d11fbb
Emsisoft	Gen:Heur.Conjar.9 (B)
F-Secure	Trojan.TR/Patched.Ren.Gen
TrendMicro	TROJ_GEN.R03BC0PFE23
McAfee-GW-Edition	BehavesLike.Win32.RAHack.mh
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.DNSChanger
GData	Win32.Trojan.Agent.E7GTY6
Avira	TR/Patched.Ren.Gen
Antiy-AVL	Trojan/Win32.DNSChanger
Xcitium	TrojWare.Win32.DNSChanger.ACS@k1361
Arcabit	Trojan.Conjar.9
ZoneAlarm	Trojan.Win32.DNSChanger.acs
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
McAfee	generic!bg.ema
MAX	malware (ai score=84)
VBA32	suspected of Trojan-Downloader.Agent.31
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R03BC0PFE23
Rising	Trojan.Zlob!1.A07E (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	JS/DNSChanger.APN!tr
AVG	Win32:DNSChanger-TL [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Win32/TrojanDownloader.Zlob_AGen.B?

Win32/TrojanDownloader.Zlob_AGen.B removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X