About "HackTool.Agent.ACGen" infection

The HackTool.Agent.ACGen is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What HackTool.Agent.ACGen virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
At least one IP Address, Domain, or File Name was found in a crypto call
A process created a hidden window
Drops a binary and executes it
Sniffs keystrokes
Exhibits behavior characteristic of iSpy Keylogger
Installs itself for autorun at Windows startup
Creates a copy of itself
Collects information to fingerprint the system

Related domains:

z.whorecord.xyz

a.tomx.xyz

tuttotone.serveftp.com

How to determine HackTool.Agent.ACGen?


File Info:
crc32: 8B47FBC8
md5: c050d373293b8f2fe952065fb66a03b0
name: fl_register.exe
sha1: ff221ab036b2eefe88a11539dbe199c4045843f2
sha256: 8759d45e142c15d4e4cc63fc147114ef52bb57623710552c4ba76f43face2524
sha512: 0e1032382cc13a7e28b235c009ccd1c477d79c82a132faf9ed73a732b934b712fca610372aa8e6dad17013ab6f339187c4b9924acbde9b23e664cc5e4b30e167
ssdeep: 6144:47iP4w6RW+pGW6qKbBuYI5y8CdKnuIlBdaLPlAzjIeeod0KbJeowGA:xBp0VflRICHwn
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright (C) 2011 Realtek Semiconductor Corp.
Assembly Version: 1.5.0.4
InternalName: AssemblyChange.exe
FileVersion: 1.5.0.4
CompanyName: Realtek Semiconductor Corp.
ProductName: Realtek HD Auido Update and remove driver Tool
ProductVersion: 1.5.0.4
FileDescription: Driver Update and remove for Windows x64 or x86_32
OriginalFilename: AssemblyChange.exe

HackTool.Agent.ACGen also known as:

MicroWorld-eScan	Trojan.GenericKD.30546755
FireEye	Generic.mg.c050d373293b8f2f
CAT-QuickHeal	Trojan.Scar
ALYac	Trojan.GenericKD.30546755
Malwarebytes	HackTool.Agent.ACGen
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan ( 004b8b661 )
BitDefender	Trojan.GenericKD.30546755
K7GW	Trojan ( 004b8b661 )
CrowdStrike	win/malicious_confidence_100% (W)
TrendMicro	TROJ_GEN.R002C0GJI19
BitDefenderTheta	Gen:NN.ZemsilF.33558.tm0@aWnbKi
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/TrojanDropper.Agent.AQJ
APEX	Malicious
Paloalto	generic.ml
GData	Trojan.GenericKD.30546755
Kaspersky	Trojan.Win32.Scar.ridi
Alibaba	Trojan:Win32/Generic.125c3d8d
NANO-Antivirus	Trojan.Win32.Scar.ezoquu
AegisLab	Trojan.Win32.Scar.4!c
Avast	Win32:Malware-gen
Rising	Backdoor.MSIL.Bladabindi!1.9E49 (CLASSIC)
Ad-Aware	Trojan.GenericKD.30546755
Sophos	Mal/Generic-S
Comodo	Malware@#5mjkl606gvpp
F-Secure	Trojan.TR/Dropper.Gen
DrWeb	Trojan.DownLoader26.35178
Zillya	Trojan.GenericKD.Win32.113515
Invincea	heuristic
McAfee-GW-Edition	RDN/Generic Dropper
Trapmine	malicious.moderate.ml.score
Emsisoft	Trojan.GenericKD.30546755 (B)
Ikarus	Trojan.MSIL.Lagaxy
Jiangmin	Trojan.Generic.dmfwf
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Win32.Scar
Endgame	malicious (high confidence)
Arcabit	Trojan.Generic.D1D21B43
ZoneAlarm	Trojan.Win32.Scar.ridi
Microsoft	Trojan:Win32/Tiggre!rfn
McAfee	RDN/Generic Dropper
MAX	malware (ai score=99)
VBA32	TScope.Trojan.MSIL
Cylance	Unsafe
TrendMicro-HouseCall	TROJ_GEN.R002C0GJI19
Yandex	Trojan.Scar!BBKRKWwTmTA
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	MSIL/Agent.AQJ!tr
AVG	Win32:Malware-gen
Cybereason	malicious.3293b8
Panda	Trj/GdSda.A
Qihoo-360	Win32/Trojan.72b

How to remove HackTool.Agent.ACGen?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “HackTool.Agent.ACGen” infection