About "Win64/TrojanDownloader.Agent.ALY" infection

The Win64/TrojanDownloader.Agent.ALY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win64/TrojanDownloader.Agent.ALY virus can do?

A file was accessed within the Public folder.
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Attempts to identify installed AV products by installation directory
Attempts to modify proxy settings

How to determine Win64/TrojanDownloader.Agent.ALY?


File Info:
name: BC240E119AE6AD4E712B.mlw
path: /opt/CAPEv2/storage/binaries/8db30678d5660a8f5ef42c64684c5188bf320a27f9bdaf487599c0299fc37e61
crc32: 71FC4733
md5: bc240e119ae6ad4e712be4b88113fa3d
sha1: 08a04874b3982b7f30a5ba3031a83d4232c5de70
sha256: 8db30678d5660a8f5ef42c64684c5188bf320a27f9bdaf487599c0299fc37e61
sha512: 7168847d84019c68e199b9b1c7a7392a35ba4cbc20cfed63e718b69817c907fb64f6c4dc55435b7e68127abb21f3cc477fb4784c292f373591a1678c1dfe8ab8
ssdeep: 49152:3p80bmdU+yyRp7dr1Jsn/wv7j6Q3BCkacvFzELV/0vbXP5XcnDbs:3p8ldU8xJsWzELV/0TPZcnD
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T18CD56B5B26AC51ECE47F8174C9568A4AD7F274F12B3583CF029446AF0FB76A10C29B93
sha3_384: 62100e397af5dd7c86fff30219cec3abaf5cc43108dd197e269727845859b3af10bc4e0bbea75c4fffd6e1b23321ca53
ep_bytes: 4883ec28e83fea00004883c428e952fe
timestamp: 2024-04-08 10:31:44

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Visual Studio Installer
FileVersion: 17.9.34723.18
InternalName: vs_community.exe
OriginalFilename: vs_community.exe
ProductName: Microsoft Visual Studio Community
ProductVersion: Visual Studio 2022
LegalCopyright: © Microsoft Corporation. All rights reserved.
Translation: 0x0409 0x04b0

Win64/TrojanDownloader.Agent.ALY also known as:

Bkav	W64.AIDetectMalware
FireEye	Generic.mg.bc240e119ae6ad4e
Skyhigh	Artemis!Trojan
McAfee	Artemis!BC240E119AE6
Sangfor	Downloader.Win64.Aly.Vq02
Alibaba	TrojanDownloader:Win64/DropperX.402513f0
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win64/TrojanDownloader.Agent.ALY.gen
APEX	Malicious
Kaspersky	Trojan.Win32.Agentb.mbpz
Rising	Downloader.Agent!8.B23 (CLOUD)
Sophos	Mal/Generic-S
Google	Detected
F-Secure	Dropper.DR/AVI.Gepys.gijru
Avira	DR/AVI.Gepys.gijru
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	Trojan.Win32.Agentb.mbpz
Cynet	Malicious (score: 99)
DeepInstinct	MALICIOUS
Cylance	unsafe
Tencent	Win64.Trojan-Downloader.Oader.Wdkl
Ikarus	Backdoor.Agent
Fortinet	W64/Agent.ALY!tr.dldr
alibabacloud	Trojan[downloader]:Win/Agentb.mbpz

How to remove Win64/TrojanDownloader.Agent.ALY?

Win64/TrojanDownloader.Agent.ALY removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Win64/TrojanDownloader.Agent.ALY” infection

Gridinsoft Anti-Malware

How to determine Win64/TrojanDownloader.Agent.ALY?

File Info:

Version Info:

Win64/TrojanDownloader.Agent.ALY also known as:

How to remove Win64/TrojanDownloader.Agent.ALY?

About the author

Paul Valéry

Leave a Comment X