Categories: Spy

Should I remove “Generic.SpyAgent.6.A8957331”?

The Generic.SpyAgent.6.A8957331 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.SpyAgent.6.A8957331 virus can do?

Sample contains Overlay data
Performs HTTP requests potentially not found in PCAP.
Authenticode signature is invalid
Checks the CPU name from registry, possibly for anti-virtualization
Attempts to modify proxy settings
Touches a file containing cookies, possibly for information gathering
Harvests credentials from local FTP client softwares
Harvests information related to installed instant messenger clients
Collects information to fingerprint the system

How to determine Generic.SpyAgent.6.A8957331?


File Info:
name: 453A57ED7525A47F6A74.mlwpath: /opt/CAPEv2/storage/binaries/5c0af9c605afd72bef7ce8184bccc9578edb3a17498acebb74d02eb4af0a6d2ecrc32: 5AE414EDmd5: 453a57ed7525a47f6a7494ad2294472dsha1: 4278bfec460016d5b2f9cb2d10ad7e2118727a75sha256: 5c0af9c605afd72bef7ce8184bccc9578edb3a17498acebb74d02eb4af0a6d2esha512: 0c22ae248ca1a3c09219159880a816a9e44dfc3f77da6a003dfe4f9fcbac4eb5fb92e308523bb1af26e0e60df04b99bc654229d0a2f72f1acd2f48f7e923897fssdeep: 12288:EyecamJ2nqf/O20HxaV+3GIfGRt+hkjUs0L9CmX3/q:9ecaKu/20bWIfUIhCURL9Cmytype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T136C4BF23B192C036D07330718A1EA7665DBAF930453394977FC419599F60AE2EF3AB36sha3_384: 306a23ffedada8a0afccb329960a59d005efa2c504d9f05e394c8ac188de528c089977bd06bb229c0c4d5e5a1738c8c5ep_bytes: e8d1ac0000e989feffff8bff558bec8btimestamp: 2018-12-07 23:40:30
Version Info:
0: [No Data]

Generic.SpyAgent.6.A8957331 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Agent.i!c
DrWeb	Trojan.PWS.Stealer.25327
MicroWorld-eScan	Generic.SpyAgent.6.A8957331
Skyhigh	BehavesLike.Win32.GenDownloader.hh
ALYac	Trojan.PSW.Vidar
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Generic.SpyAgent.6.A8957331
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Malware:Win32/km_287bc.None
K7GW	Password-Stealer ( 0053c3ab1 )
K7AntiVirus	Password-Stealer ( 0053c3ab1 )
Arcabit	Generic.SpyAgent.6.A8957331
BitDefenderTheta	Gen:NN.ZexaF.36792.JmY@aaw0xDc
Symantec	Infostealer.Vidar
Elastic	Windows.Trojan.Vidar
ESET-NOD32	a variant of Win32/PSW.Agent.OGR
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Malware.Zusy-7124171-0
Kaspersky	Trojan-PSW.Win32.Agent.thsz
BitDefender	Generic.SpyAgent.6.A8957331
NANO-Antivirus	Trojan.Win32.Graftor.fkyplc
Avast	Win32:MalwareX-gen [Trj]
Tencent	Malware.Win32.Gencirc.10b6f06e
Emsisoft	Generic.SpyAgent.6.A8957331 (B)
F-Secure	Heuristic.HEUR/AGEN.1316698
Zillya	Trojan.Tepfer.Win32.92493
TrendMicro	TROJ_FRS.0NA103C320
FireEye	Generic.mg.453a57ed7525a47f
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.PSW.Tepfer.jbl
Webroot	W32.Trojan.Gen
Varist	W32/Vidar.A.gen!Eldorado
Avira	HEUR/AGEN.1316698
MAX	malware (ai score=100)
Antiy-AVL	Trojan[PSW]/Win32.Tepfer
Kingsoft	malware.kb.a.1000
Xcitium	Malware@#2mi9m7c7z0roa
Microsoft	PWS:Win32/Vidar.YA!MTB
ZoneAlarm	Trojan-PSW.Win32.Agent.thsz
GData	Generic.SpyAgent.6.A8957331
Google	Detected
AhnLab-V3	Malware/Win32.RL_Generic.R296259
McAfee	GenericRXHD-PT!453A57ED7525
VBA32	BScope.TrojanPSW.Tepfer
Cylance	unsafe
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_FRS.0NA103C320
Rising	Stealer.Vidar!1.B80D (CLASSIC)
Ikarus	Trojan-Spy.Vidar
MaxSecure	Trojan.Malware.73709069.susgen
Fortinet	W32/Agent.OFF!tr
AVG	Win32:MalwareX-gen [Trj]
Cybereason	malicious.c46001
DeepInstinct	MALICIOUS