Malware

What is “Win32:Agent-URY [Trj]”?

Malware Removal

The Win32:Agent-URY [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Win32:Agent-URY [Trj] virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Win32:Agent-URY [Trj]?



File Info:

crc32: BF1A5F75
md5: 52453ee9e2e5f8925ddcf119a178040b
name: 52453EE9E2E5F8925DDCF119A178040B.mlw
sha1: ab78214c08b70dd53a9fa20a93576a7692bceeb8
sha256: f56f18416eb176b68b2e3dcf7160f942b4bee420f111d60676426d6eae3f26ff
sha512: da7416685d67fe6d1074e0a12f2f7b08542f20c292998121555e9183a6c650d95aa2ec3e7a613c0bb51aee1d6b406aa208341caff10fd278d31d12dd991aedc4
ssdeep: 12288:+Q6yPYX1N8RF3Z4mxx5LwAxhrL2mvXXnDeC4dT:z69FN8RQmX5cAxhPtDeLR
type: PE32 executable (GUI) Intel 80386, for MS Windows


Version Info:

Translation: 0x0804 0x04b0
InternalName: PetLoveQQ
FileVersion: 0.00.0102
CompanyName: HiFi Sun
Comments: x5185x90e8x7248x672c0.0.113
ProductName: x5ba0x7231QQ
ProductVersion: 0.00.0102
OriginalFilename: PetLoveQQ.exe

Win32:Agent-URY [Trj] also known as:

BkavW32.AIDetect.malware2
K7AntiVirusRiskware ( 0040eff71 )
CynetMalicious (score: 100)
CMCGeneric.Win32.52453ee9e2!MD
ZillyaTrojan.Packed.Win32.100265
CrowdStrikewin/malicious_confidence_60% (D)
AlibabaPacked:Win32/ASProtect.a04b9a7a
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.c08b70
CyrenW32/Backdoor.JHYF-6111
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Packed.ASProtect.AAB
ZonerProbably Heur.ExeHeaderH
APEXMalicious
AvastWin32:Agent-URY [Trj]
ClamAVWin.Trojan.Agent-115352
NANO-AntivirusTrojan.Win32.Agent.blzkmu
TencentWin32.Backdoor.Agent.Staj
SophosMal/Generic-R + Mal/Behav-270
ComodoPacked.Win32.Aspack.AB@1s8lrk
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Ipamor.hc
FireEyeGeneric.mg.52453ee9e2e5f892
SentinelOneStatic AI – Malicious PE
WebrootVir.Tool.Gen
AviraTR/Agent.sviio
eGambitUnsafe.AI_Score_100%
MicrosoftTrojan:Win32/Wacatac.B!ml
AhnLab-V3Trojan/Win32.Agent.C4234357
McAfeeRDN/Generic BackDoor
VBA32Trojan.VB.Schmidti
PandaGeneric Malware
RisingBackdoor.Win32.Agent.aqv (CLASSIC)
YandexBackdoor.Agent!tjT4O0SuXmc
IkarusTrojan.Win32.ASProtect
MaxSecureTrojan.Malware.300983.susgen
AVGWin32:Agent-URY [Trj]

How to remove Win32:Agent-URY [Trj]?

Win32:Agent-URY [Trj] removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment