Categories: Adware

Adware.Agent.UPX malicious file

The Adware.Agent.UPX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adware.Agent.UPX virus can do?

Sample contains Overlay data
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Anomalous binary characteristics
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Adware.Agent.UPX?


File Info:
name: B5E14BD9686822A66019.mlwpath: /opt/CAPEv2/storage/binaries/729fb6504eaf36c17f2546420482a29f04caea2714a37ee119ac88aff93bd961crc32: 068D2B46md5: b5e14bd9686822a66019beb52c12365bsha1: 5eac20b5baa536c653ff7ca0d5078d9e7a119460sha256: 729fb6504eaf36c17f2546420482a29f04caea2714a37ee119ac88aff93bd961sha512: c70ddba7c382de872c45d96ec1d3b52f6a42bdd6130395290172e869fc688b20d6f31a45dc76994381b37f611c4d584c28973731704474e60ee9f8185af029eassdeep: 24576:qEmvS3PLNyroPr4GGZdjfKRvI+2GRK4Dc3aPJuJS+mTwkokWlGKUYUTGiP/nL7Z:qE13D8c4GG/jfKCfGgQt5TozsKYVtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T16085E2919D2A3A7AF72BCF3B8CBA79198A1123B7FF03A49F5435649400763916F0750Esha3_384: 7a2814ce662bdb380be88955b5c3b98670aca756e29cae011b43522c0163cd652b886ee17d03da0da7a64a67dfb3702eep_bytes: 60be002050008dbe00f0efff57eb0b90timestamp: 1970-01-01 12:10:44
Version Info:
0: [No Data]

Adware.Agent.UPX also known as:

Bkav	W32.AIDetectMalware
tehtris	Generic.Malware
DrWeb	Trojan.MulDrop7.18312
MicroWorld-eScan	Gen:Variant.Doina.58003
ClamAV	Win.Malware.Zusy-9819743-0
FireEye	Generic.mg.b5e14bd9686822a6
CAT-QuickHeal	Trojan.Skeeyah.14991
ALYac	Gen:Variant.Doina.58003
Malwarebytes	Adware.Agent.UPX
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
BitDefenderTheta	Gen:NN.ZexaF.36350.RnJfayzEoPoj
Cyren	W32/Busky.B.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/Eyoorun.D potentially unsafe
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Agentb.bqaf
BitDefender	Gen:Variant.Doina.58003
NANO-Antivirus	Trojan.Win32.Agent.dufbyy
Avast	Sf:ShellCode-C [Trj]
Tencent	Trojan.Win32.Agentb.wq
F-Secure	Heuristic.HEUR/AGEN.1316159
VIPRE	Gen:Variant.Doina.58003
TrendMicro	TROJ_GEN.R011C0PHN23
Trapmine	malicious.high.ml.score
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Agentb.bnl
Avira	HEUR/AGEN.1316159
Xcitium	TrojWare.Win32.MalPack.PKB@1rava1
Arcabit	Trojan.Doina.DE293
ZoneAlarm	Trojan.Win32.Agentb.bqaf
GData	Gen:Variant.Doina.58003
Google	Detected
AhnLab-V3	Trojan/Win.Agentb.R600337
Acronis	suspicious
VBA32	BScope.Trojan.Agentb
MAX	malware (ai score=89)
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R011C0PHN23
Rising	Trojan.Agent!8.B1E (TFE:5:hSgEiLzRAPE)
Yandex	Rootkit.Agent!FoGjttfAOnA
Ikarus	Trojan.Win32.Agentb
Fortinet	W32/Agent.EB1!tr.dldr
AVG	Sf:ShellCode-C [Trj]
Cybereason	malicious.968682
DeepInstinct	MALICIOUS