Malware

Win32:Agent-ATZG [Trj] (file analysis)

Malware Removal

The Win32:Agent-ATZG [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32:Agent-ATZG [Trj] virus can do?

  • Reads data out of its own binary image
  • Authenticode signature is invalid

How to determine Win32:Agent-ATZG [Trj]?


File Info:

name: 068EBE0528AEE95263DB.mlw
path: /opt/CAPEv2/storage/binaries/bebf01c2609113a56891ef8faa076c05d1e220a88786721e24c07504ac823800
crc32: C44969E4
md5: 068ebe0528aee95263dba80c44811142
sha1: 1e325c7b67975e1048fbe2f488d329c1297b5efa
sha256: bebf01c2609113a56891ef8faa076c05d1e220a88786721e24c07504ac823800
sha512: 914defd390912e1bed3af1887dfa423f81d8fedaf1bc9c24ce88dffa3c5bb451474150432ca6dd8fa0c64d5915546310b35001d694bf7778e6b36f0de629e4a0
ssdeep: 1536:JRw2JFBYdLxq1KiULHN103kEGIHG9kNo:bwLmULHfGW
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1AF538E17B990C130F44588F44D749B37EE3FAD26079792AAD390E4ED8DB5150EA063BB
sha3_384: ecb035813f42cdec417257b2ecb33eb1238db780ee164f722b04392f0e85484a5f35ffbd60e69d80b72ec16b0755bbd8
ep_bytes: a1dbc04000c1e002a3dfc04000575133
timestamp: 1971-10-03 08:55:00

Version Info:

0: [No Data]

Win32:Agent-ATZG [Trj] also known as:

LionicTrojan.Win32.Antavmu.lZ2a
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop4.10817
MicroWorld-eScanGen:Trojan.FileInfector.dCW@aCAohLe
FireEyeGen:Trojan.FileInfector.dCW@aCAohLe
CAT-QuickHealTrojan.GenericPMF.S12362059
McAfeeGeneric-FAJF!068EBE0528AE
CylanceUnsafe
ZillyaWorm.Agent.Win32.24568
SangforTrojan.Win32.Antavmu.abow
K7AntiVirusTrojan ( 001f4e2b1 )
AlibabaMalware:Win32/km_2e2a4e5.None
K7GWTrojan ( 001f4e2b1 )
Cybereasonmalicious.528aee
ArcabitTrojan.FileInfector.EADB13
BitDefenderThetaAI:Packer.027103FA1E
VirITTrojan.Win32.Generic.AFAV
CyrenW32/Antavmu.A.gen!Eldorado
SymantecSMG.Heur!gen
ESET-NOD32a variant of Win32/Agent.NPR
APEXMalicious
ClamAVWin.Trojan.Fileinfector-44
KasperskyTrojan.Win32.Antavmu.abow
BitDefenderGen:Trojan.FileInfector.dCW@aCAohLe
NANO-AntivirusTrojan.Win32.Drop.cwgurk
SUPERAntiSpywareTrojan.Agent/Gen-Antavmu
AvastWin32:Agent-ATZG [Trj]
TencentWorm.Win32.Agent.aal
Ad-AwareGen:Trojan.FileInfector.dCW@aCAohLe
TACHYONTrojan/W32.Antavmu.62976.M
EmsisoftGen:Trojan.FileInfector.dCW@aCAohLe (B)
ComodoTrojWare.Win32.Antavmu.D@5aon9q
BaiduWin32.Trojan.Inject.az
VIPRETrojan.Win32.Antavmu.d (v)
TrendMicroTROJ_GEN.R002C0DAT22
McAfee-GW-EditionArtemis!Trojan
SophosML/PE-A + Mal/Antavmu-A
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.Win32.Antavmu.a
WebrootW32.Malware.Gen
AviraTR/Antavmu.daua
Antiy-AVLTrojan/Win32.SGeneric
MicrosoftTrojan:Win32/Antavmu.D
GDataGen:Trojan.FileInfector.dCW@aCAohLe
CynetMalicious (score: 99)
AhnLab-V3Trojan/Win32.Antavmu.R25058
Acronissuspicious
VBA32Trojan.Antavmu
ALYacGen:Trojan.FileInfector.dCW@aCAohLe
MAXmalware (ai score=85)
MalwarebytesMalware.AI.1890637107
TrendMicro-HouseCallTROJ_GEN.R002C0DAT22
RisingTrojan.Win32.Antavmu.e (CLOUD)
YandexTrojan.GenAsa!UVM9UIzqgzk
IkarusGen.Win32.FileInfector
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Antavmu.A!tr
AVGWin32:Agent-ATZG [Trj]
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Win32:Agent-ATZG [Trj]?

Win32:Agent-ATZG [Trj] removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment