Dropped:Application.Agent.PB removal tips

The Dropped:Application.Agent.PB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Dropped:Application.Agent.PB virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• At least one process apparently crashed during execution
• Creates RWX memory
• Dynamic (imported) function loading detected
• Enumerates running processes
• Expresses interest in specific running processes
• A process created a hidden window
• Drops a binary and executes it
• Unconventionial language used in binary resources: Portuguese (Brazilian)
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Attempts to modify desktop wallpaper
• Attempts to stop active services
• Created a process from a suspicious location
• Installs itself for autorun at Windows startup
• Installs itself for autorun at Windows startup
• Created a service that was not started

How to determine Dropped:Application.Agent.PB?

File Info:
name: 8096501F463292269E2D.mlw
path: /opt/CAPEv2/storage/binaries/98849077cb72a7ae0c6d656084891c5f3cc739e95455d2356406fe5fab8eddf3
crc32: E0715D05
md5: 8096501f463292269e2d95eea29e4908
sha1: a927d1c60682903c19a8899543a4bfb9cce88385
sha256: 98849077cb72a7ae0c6d656084891c5f3cc739e95455d2356406fe5fab8eddf3
sha512: 7a0bca5c2dd875d8ddc4faff9f60d9ad6b0b90b4f0f48493f01dcecc1fb090e5bbb20cd20705537f803bde475249b12e623ee624e28aa3fc410a8c94cc79a2b2
ssdeep: 49152:TFsaqXOz8cyC3URy9uFfLL67xkXnPA/I2mu6IN:TCa0OhlktWSnMI2mu/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T177C51273B2D08437D1331A79AD0F97A969267E502924A48E37D87F8C6E73740352F29B
sha3_384: 9701c061a8209c61e4bbc4c843cc3c337a24c60969c27adb7b0d7d890f137ea5324e640fe41cdc57e797715281382d99
ep_bytes: 558bec83c4f0b8acb54500e8549efaff
timestamp: 2013-08-27 18:15:46

Version Info:
CompanyName: 
FileDescription: 
FileVersion: 1.0.0.0
InternalName: 
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: 
ProductName: 
ProductVersion: 1.0.0.0
Translation: 0x0409 0x04e4

Dropped:Application.Agent.PB also known as:

How to remove Dropped:Application.Agent.PB?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.