Threat Descriptons



Category :


Type :


Aliases :

Trojan-Dropper:W32/Agent!DeepGuard, Trojan-Dropper:W32/Dyreza!DeepGuard


A file or program has triggered a DeepGuard heuristic detection because it performs (or contains instructions for) actions similar to known trojan-droppers.


The F-Secure security product will automatically block the file from running.

A False Positive is when a file is incorrectly detected as harmful, usually because its code or behavior resembles known harmful programs. A False Positive will usually be fixed in a subsequent database update without any action needed on your part. If you wish, you may also:

  • Check for the latest database updates

    First check if your F-Secure security program is using the latest updates, then try scanning the file again.

  • Submit a sample

    After checking, if you still believe the file is incorrectly detected, you can submit a sample of it for re-analysis.

    Note: If the file was moved to quarantine, you need to collect the file from quarantine before you can submit it.

  • Exclude a file from further scanning

    If you are certain that the file is safe and want to continue using it, you can exclude it from further scanning by the F-Secure security product.

    Note: You need administrative rights to change the settings.

Technical Details

About DeepGuard

When a file or program is first launched, F-Secure's security programs verify its safety from the Security Cloud file reputation service. If it cannot be verified, DeepGuard starts to monitor its behavior. DeepGuard automatically blocks files or programs that try to make potentially harmful changes to the system.

This detection indicates that the file or program behaved like a trojan-dropper - a file that contains other files compressed inside its body. When the trojan-dropper is launched, it extracts the compressed files and drops or saves and installs them onto the computer or mobile device.

The dropped files are usually other harmful programs, such as exploits, backdoors or trojans. Once installed and launched, the dropped file can then perform other harmful actions.

In many cases, trojan-droppers will also drop files that act as decoys to distract the user from any harmful activities taking place. These decoys may be games, images, messages, or even other programs.

More Support


Ask questions in our Community .

User Guides

Check the user guide for instructions.

Contact Support

Chat with or call an expert.

Submit a Sample

Submit a file or URL for analysis.