Categories: Trojan

Win64/TrojanDownloader.Agent.IH removal guide

The Win64/TrojanDownloader.Agent.IH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win64/TrojanDownloader.Agent.IH virus can do?

Reads data out of its own binary image
Unconventionial language used in binary resources: Chinese (Simplified)
Network activity detected but not expressed in API logs

How to determine Win64/TrojanDownloader.Agent.IH?


File Info:
crc32: 282A3B6Emd5: 17084ea52b088e25aaeb9fea67b42997name: 17084EA52B088E25AAEB9FEA67B42997.mlwsha1: 39688e7e036412d6162be0ab914f7dd7f03e68c7sha256: fcaf8acb3ed56f5c4c0ebab81e4708faaee56c4ba65006fada3fbee5a54e19b7sha512: 8a279a8e6cb3864a1576411fd4bdc927ba5cf0c896b42acd8d9323d8b5980bb47cbfc93db5736c75fdcec4a93b5a0b49d5e7cc00a612637a33a4ee73bfebd63bssdeep: 24576:Y2G/nvxW3WsTPWzqlqaHbpbkF6nXyho5L4qEfCW4KF6PXyGo5pq1f03w:YbA3DuzI/JkwGULhE7w1UE183wtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win64/TrojanDownloader.Agent.IH also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Rasftuby.Gen.14
FireEye	Generic.mg.17084ea52b088e25
McAfee	Artemis!17084EA52B08
BitDefender	Trojan.Rasftuby.Gen.14
CrowdStrike	win/malicious_confidence_60% (D)
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Runner.vho
Ad-Aware	Trojan.Rasftuby.Gen.14
Emsisoft	Trojan.Rasftuby.Gen.14 (B)
F-Secure	Trojan.TR/Dldr.Agent.ealnx
McAfee-GW-Edition	BehavesLike.Win32.Suspicioustrojan.dc
Sophos	ML/PE-A
Ikarus	Win32.Outbreak
eGambit	Unsafe.AI_Score_99%
Avira	TR/Dldr.Agent.ealnx
Microsoft	Trojan:Win32/Wacatac.DF!ml
Arcabit	Trojan.Rasftuby.Gen.14
ZoneAlarm	HEUR:Trojan.Win32.Runner.vho
GData	Trojan.Rasftuby.Gen.14
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.RL_Generic.R360804
ALYac	Trojan.Rasftuby.Gen.14
MAX	malware (ai score=82)
Malwarebytes	Trojan.BrowserModifier.SFX
ESET-NOD32	a variant of Win64/TrojanDownloader.Agent.IH
TrendMicro-HouseCall	TROJ_GEN.R002H09A721
Fortinet	W64/Agent.IH!tr.dldr
AVG	Win64:TrojanX-gen [Trj]
Cybereason	malicious.52b088
Avast	Win64:TrojanX-gen [Trj]