Categories: Backdoor

Backdoor:Win32/Agent.HB removal tips

The Backdoor:Win32/Agent.HB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:Win32/Agent.HB virus can do?

Sample contains Overlay data
Uses Windows utilities for basic functionality
Reads data out of its own binary image
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Uses suspicious command line tools or Windows utilities

How to determine Backdoor:Win32/Agent.HB?


File Info:
name: 59C58528958C19A8F19E.mlwpath: /opt/CAPEv2/storage/binaries/09d99a375e3facc3ec47a28cc144acf8026258227e1ff992bfcfc44f557c5695crc32: 0FFEC433md5: 59c58528958c19a8f19e92f0e1af5efasha1: 7d9fc5e3578ccd39c5d91e345db9133580992b4esha256: 09d99a375e3facc3ec47a28cc144acf8026258227e1ff992bfcfc44f557c5695sha512: 7711d633b02bac71dcccf5e98fabf4880def486927e390472dc233a1fb12adc85f71d3d81d7bc952e9eefd752e52991fdc03fef73368acdecfdeb3fd52ec029cssdeep: 3072:05lvZ4nDbfagCqKZk5yY//kGKVBICZVF/QhYpmH7zwb8WSAofrWlXw:05lh4nDWgRAkP7kVOdH7UGaStype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1DCE3022313E43D05FE7EF47784374612E7998AF17AC3660607AF15618E62E4DBE42A83sha3_384: 82af2d312e5c0cb164be766e848889b9b21a15d915adc5762e8bc0f27f6cdf9254979f12fc4dc516750e84742c9f7ff0ep_bytes: 558bec6aff68d8204000681017400064timestamp: 2010-04-08 06:55:58
Version Info:
0: [No Data]

Backdoor:Win32/Agent.HB also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Torr.m!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ser.Babar.5850
FireEye	Generic.mg.59c58528958c19a8
Skyhigh	BehavesLike.Win32.Generic.cc
ALYac	Gen:Variant.Ser.Babar.5850
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.ins
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Backdoor:Win32/Farfli.e25f709f
K7GW	Trojan ( 0055e3e41 )
K7AntiVirus	Trojan ( 0055e3e41 )
Arcabit	Trojan.Ser.Babar.D16DA
BitDefenderTheta	AI:Packer.B099D2601F
VirIT	Backdoor.Win32.Torr.BIG
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Farfli.BA
APEX	Malicious
ClamAV	Win.Malware.Filerepmalware-9856573-0
Kaspersky	Backdoor.Win32.Torr.big
BitDefender	Gen:Variant.Ser.Babar.5850
NANO-Antivirus	Trojan.Win32.Torr.cvxke
Avast	Win32:Evo-gen [Trj]
Tencent	Win32.Backdoor.Torr.Tzfl
TACHYON	Backdoor/W32.Torr.149768
Emsisoft	Gen:Variant.Ser.Babar.5850 (B)
F-Secure	Trojan.TR/Spy.Gen
DrWeb	BackDoor.Siggen.23260
Zillya	Backdoor.Torr.Win32.463
TrendMicro	BKDR_YONSOLE.SMA
Trapmine	malicious.high.ml.score
Sophos	ZProtected (PUA)
Ikarus	Backdoor.Win32.Torr
Jiangmin	Backdoor/Torr.ask
Google	Detected
Avira	TR/Spy.Gen
Varist	W32/Backdoor.WDZO-4644
Antiy-AVL	Trojan[Backdoor]/Win32.Torr
Kingsoft	Win32.Hack.Torr.big
Xcitium	Backdoor.Win32.Torr.~big@1vvc49
Microsoft	Backdoor:Win32/Agent.HB
ViRobot	Backdoor.Win32.A.Torr.149807
ZoneAlarm	Backdoor.Win32.Torr.big
GData	Gen:Variant.Ser.Babar.5850
Cynet	Malicious (score: 99)
AhnLab-V3	Backdoor/Win32.Torr.C357144
McAfee	GenericRXAA-AA!59C58528958C
MAX	malware (ai score=100)
VBA32	BScope.Trojan.SvcHorse.01643
Malwarebytes	Generic.Malware.AI.DDS
Panda	Generic Malware
TrendMicro-HouseCall	BKDR_YONSOLE.SMA
Rising	Trojan.Generic@AI.93 (RDML:ngXkdZPzaXX4PZ7W2SK69w)
Yandex	Trojan.GenAsa!ISnVjs8ONoc
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.1155838.susgen
Fortinet	W32/Torr.AM!tr.bdr
AVG	Win32:Evo-gen [Trj]
Cybereason	malicious.8958c1
DeepInstinct	MALICIOUS
alibabacloud	Worm:Win/Farfli.BA