In this message, I am going to clarify how the Convagent trojan infused into your system, as well as the best way to get rid of Convagent trojan virus.
What is Convagent trojan?
| Name | Convagent |
| Infection Type | Trojan |
| Symptoms |
|
| Similar behavior | Socelars, CookiesStealer, Cutwail, DataStealer, BlackDrop, Guloader |
| Fix Tool |
See If Your System Has Been Affected by Convagent trojan |
The name of this sort of malware is a reference to a well-known legend concerning Trojan Horse, that was utilized by Greeks to get in the city of Troy and win the war. Like a fake horse that was left for trojans as a gift, Convagent trojan virus is dispersed like something legit, or, at least, helpful. Harmful apps are concealing inside of the Convagent trojan virus, like Greeks inside of a huge wooden dummy of a horse.1Trojan viruses are one of the leading malware types by its injection frequency for quite a long period of time. And now, throughout the pandemic, when malware became enormously active, trojan viruses boosted their activity, too. You can see a number of messages on various resources, where people are complaining about the Convagent trojan virus in their computers, as well as requesting for assistance with Convagent trojan virus removal.
Trojan Convagent is a kind of virus that injects into your computer, and after that performs different malicious functions. These functions depend on a type of Convagent trojan: it can serve as a downloader for additional malware or as a launcher for an additional malicious program which is downloaded together with the Convagent trojan virus. Over the last 2 years, trojans are additionally spread using email add-ons, and in the majority of cases utilized for phishing or ransomware injection.
Convagent2 also known as
| Bkav | W32.AIDetectVM.malware1 |
| Elastic | malicious (high confidence) |
| MicroWorld-eScan | Trojan.GenericKD.35630650 |
| CAT-QuickHeal | PUA.IgenericRI.S16788537 |
| ALYac | Trojan.GenericKD.35630650 |
| Cylance | Unsafe |
| AegisLab | Adware.Win32.ExtInstaller.2!c |
| Sangfor | Malware |
| K7AntiVirus | Spyware ( 005710191 ) |
| K7GW | Spyware ( 005710191 ) |
| Cybereason | malicious.9706dc |
| BitDefenderTheta | AI:Packer.1BDCCD951F |
| Cyren | W32/Trojan.ECUE-8437 |
| Symantec | ML.Attribute.HighConfidence |
| APEX | Malicious |
| Paloalto | generic.ml |
| ClamAV | Win.Malware.Razy-9789744-0 |
| Kaspersky | HEUR:Trojan.Win32.Convagent.gen |
| Alibaba | TrojanSpy:Win32/Generic.59c229a1 |
| Rising | Exploit.Uacbypass!1.CE04 (CLASSIC) |
| Ad-Aware | Trojan.GenericKD.35630650 |
| Sophos | Mal/Generic-S |
| Comodo | ApplicUnwnt@#26czx0fzxj232 |
| F-Secure | Heuristic.HEUR/AGEN.1138531 |
| VIPRE | Trojan.Win32.Generic!BT |
| TrendMicro | TROJ_GEN.R002C0PK920 |
| McAfee-GW-Edition | BehavesLike.Win32.Generic.hh |
| Emsisoft | Trojan.GenericKD.35630650 (B) |
| SentinelOne | Static AI – Malicious PE |
| Jiangmin | Trojan.PSW.Mimikatz.bis |
| Webroot | W32.Trojan.Gen |
| Avira | HEUR/AGEN.1138531 |
| MAX | malware (ai score=88) |
| Antiy-AVL | GrayWare[AdWare]/Win32.ExtInstaller |
| Kingsoft | Win32.Heur.KVMH008.a.(kcloud) |
| Gridinsoft | Trojan.Win32.Agent.ns |
| Arcabit | Trojan.Generic.D21FAE3A |
| ZoneAlarm | HEUR:Trojan.Win32.Convagent.gen |
| Cynet | Malicious (score: 100) |
| AhnLab-V3 | Trojan/Win32.RL_Wacatac.R358267 |
| Acronis | suspicious |
| McAfee | GenericRXMM-NL!89F32D59706D |
| VBA32 | BScope.Trojan.Agentb |
| Malwarebytes | Adware.Agent |
| Panda | Trj/Genetic.gen |
| ESET-NOD32 | a variant of Win32/Spy.Agent.PRP |
| TrendMicro-HouseCall | TROJ_GEN.R002C0PK920 |
| Tencent | Malware.Win32.Gencirc.10ce13b1 |
| Yandex | PUA.ExtInstaller!fTLZN5uKUD8 |
| Ikarus | Trojan.JS.ExtenBro |
| MaxSecure | Trojan.Malware.73715216.susgen |
| Fortinet | W32/Agent.PRP!tr |
| Avast | Win32:TrojanX-gen [Trj] |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Qihoo-360 | Win32/Trojan.fc8 |
Domains that associated with Convagent:
| 0 | www.ipcode.pw |
| 1 | iplogger.org |
| 2 | ocsp.comodoca.com |
| 3 | ocsp.usertrust.com |
| 4 | ocsp.sectigo.com |
What are the symptoms of Convagent trojan?
- Executable code extraction;
- Attempts to connect to a dead IP:Port (3 unique times);
- A process created a hidden window;
- Performs some HTTP requests;
- Unconventionial language used in binary resources: Chinese (Simplified);
- Uses Windows utilities for basic functionality;
- Steals private information from local Internet browsers;
- Exhibits possible ransomware file modification behavior;
- Writes a potential ransom message to disk;
- Attempts to modify proxy settings;
- Anomalous binary characteristics;
- Uses suspicious command line tools or Windows utilities;
The typical symptom of the Convagent trojan virus is a steady entrance of a wide range of malware – adware, browser hijackers, and so on. Due to the activity of these harmful programs, your PC ends up being really sluggish: malware uses up substantial quantities of RAM and CPU abilities.
One more detectable impact of the Convagent trojan virus presence is unidentified programs showed off in task manager. Frequently, these processes may attempt to mimic system processes, but you can understand that they are not legit by checking out the source of these tasks. Quasi system applications and Convagent trojan’s processes are always listed as a user’s tasks, not as a system’s.
How to remove Convagent trojan virus?
- Download and install Loaris Trojan Remover.
- Open Loaris and perform a “Standard scan“.
- “Move to quarantine” all items.
- Open “Tools” tab – Press “Reset Browser Settings“.
- Approve the reset pressing “Yes” button in the appeared window.
- Restart your computer.
To clean up Convagent trojan and be sure that all satellite malware, downloaded with the help of this trojan, will certainly be cleaned, as well, I’d recommend you to use Loaris Trojan Remover.
Convagent trojan virus is incredibly difficult to erase by hand. Its pathways are really tough to track, and the changes executed by the Convagent trojan are concealed deeply inside of the system. So, the opportunity that you will make your system 100% clean of trojans is quite low. And don't ignore malware that has been downloaded and install with the help of the Convagent trojan virus. I feel these arguments suffice to assure that removing the trojan virus manually is an awful strategy.
Convagent removal guide
To detect and delete all viruses on your PC using Loaris, it’s better to make use of Standard or Full scan. Removable scan, as well as Custom, will check only specified folders, so these scans are not able to provide the full information.
You can spectate the detects during the scan process goes. However, to perform any actions against spotted malicious programs, you need to wait until the scan is finished, or to stop the scan.
To designate the appropriate action for each detected malicious items, choose the arrow in front of the detection name of detected malicious programs. By default, all viruses will be moved to quarantine.
How to remove Convagent Trojan?
Name: Convagent
Description: Trojan Convagent is a kind of virus that infiltrates into your computer, and after that performs different destructive functions. These features depend upon a type of Convagent trojan: it can act as a downloader for many other malware or as a launcher for another destructive program which is downloaded in addition to the Convagent trojan. During the last two years, trojans are also dispersed via e-mail attachments, and most of situations utilized for phishing or ransomware infiltration.
Operating System: Windows
Application Category: Trojan
User Review
( votes)
