Adware

Adware.Agent.VDT malicious file

Malware Removal

The Adware.Agent.VDT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Adware.Agent.VDT virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests

Related domains:

dnsqa-m03.c644a3e76e438794c399ea1ccdb9206b.me

How to determine Adware.Agent.VDT?


File Info:

crc32: 494B40F8
md5: 899aa6321089ab81aaa70d56ab8da101
name: 899AA6321089AB81AAA70D56AB8DA101.mlw
sha1: 9038ae7d4f9687f03adedc8dd90451106dbc2a9e
sha256: 20efa2f646eca5b1a42332a0a0636069f8cdec4d1a40022c9961f926b2372434
sha512: abda763e3959241206a2f5924141abf1eaf3515f83118ce95cac16c796cbe6315afee1ce8d07fb2e61f0a1997215b5f25ddd2ad22d0efbe824a2fefb17b6cb9d
ssdeep: 24576:z7blabQ1F+pR0wY5tLeihVLTz8atVNsszeqyEcAd2GFH+CQAXmphC1mAcgHq67aB:z75OY5tSUBTfrN1VN/QAXx1VHp+sm8Y3
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright:
FileVersion:
CompanyName:
Comments: This installation was built with Inno Setup.
ProductName: Mertzon
ProductVersion: 1.5
FileDescription: Mertzon Setup
Translation: 0x0000 0x04b0

Adware.Agent.VDT also known as:

LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Adposhel.69
CynetMalicious (score: 99)
ALYacApplication.Agent.FQD
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojanDownloader:Win64/CloudGuard.ebd7944e
Cybereasonmalicious.21089a
CyrenW64/CloudGuard.A.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32multiple detections
APEXMalicious
AvastWin32:Agent-BCHM [Trj]
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderAdware.Agent.VDT
NANO-AntivirusTrojan.Win64.Adposhel.fideth
MicroWorld-eScanAdware.Agent.VDT
TencentWin32.Trojan.Generic.Ecko
SophosGeneric PUA JA (PUA)
ComodoMalware@#izq87qngrpq9
McAfee-GW-EditionBehavesLike.Win32.AdwareFileTour.tc
FireEyeAdware.Agent.VDT
EmsisoftApplication.Agent.FQD (B)
WebrootW32.Adware.Installcore
AviraHEUR/AGEN.1112393
Antiy-AVLTrojan/Generic.ASMalwS.2747179
MicrosoftTrojan:Win32/Occamy.C20
ArcabitAdware.Agent.VDT
GDataApplication.Agent.FQD
TACHYONTrojan/W32.Bsymem.2985472
AhnLab-V3Malware/Win32.Generic.C2692782
McAfeeArtemis!899AA6321089
MAXmalware (ai score=99)
MalwarebytesAdware.DNSUnlocker.Generic
PandaTrj/CI.A
YandexPUA.CloudGuard!LZIMS7J9AAI
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Generic.A!tr
AVGWin32:Agent-BCHM [Trj]
Paloaltogeneric.ml

How to remove Adware.Agent.VDT?

Adware.Agent.VDT removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment