Categories: Malware

Mal/Agent-AUG removal instruction

The Mal/Agent-AUG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mal/Agent-AUG virus can do?

Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Mal/Agent-AUG?


File Info:
crc32: D6BFD399md5: 42913ce0112c87deec852f9ae9a53f9cname: tmpcagssn32sha1: ec22e0142319afdd66daea923e3fce794ab0abffsha256: ebbe6a7d2a36a8b876ec778742fedcfb0b612769e052f41bb729057421197c9fsha512: adad84ba248915aeaa0c17b324df985d7b8ee90d447425594e311768bb3db53dfb0b716fa2934b350614c8a41df88c97df65c38abeefef8803d5b8b09a0a68edssdeep: 393216:XcpiiBCS4+xJVLU8IXh7bSqOEScDD3NIQcyOhC8Dzi:INB/xrIbccDT6vyOh36type: PE32 executable (GUI) Intel 80386, for MS Windows, InstallShield self-extracting archive
Version Info:
LegalCopyright: (C)ProductName: FileVersion: FileDescription: Producer shdTranslation: 0x0804 0x04e4

Mal/Agent-AUG also known as:

MicroWorld-eScan	Trojan.GenericKD.31747835
CAT-QuickHeal	W32.Ramnit.A
McAfee	Artemis!42913CE0112C
Cylance	Unsafe
K7AntiVirus	Trojan ( 0050b64b1 )
BitDefender	Trojan.GenericKD.31747835
K7GW	Trojan ( 0050b64b1 )
Cybereason	malicious.0112c8
Invincea	heuristic
Baidu	Multi.Threats.InArchive
F-Prot	W32/Ramnit.B!Generic
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
ClamAV	Win.Trojan.Ramnit-1847
GData	Trojan.GenericKD.31747835
Kaspersky	Virus.Win32.Nimnul.a
Alibaba	Virus:Win32/Nimnul.4838abef
NANO-Antivirus	Virus.Win32.Ramnit.eslalb
Avast	Win32:RmnDrp
Tencent	Malware.Win32.Gencirc.10b3ee0c
Ad-Aware	Trojan.GenericKD.31747835
Emsisoft	Adware.Dropper (A)
F-Secure	Malware.W32/Ramnit.CD
DrWeb	Adware.Searcher.1222
Zillya	Trojan.Zbot.Win32.188716
TrendMicro	PE_RAMNIT.H
McAfee-GW-Edition	Artemis
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.42913ce0112c87de
Sophos	Mal/Agent-AUG
Ikarus	Virus.Ramnit
Cyren	W32/Ramnit.B!Generic
Webroot	W32.Malware.Heur
Avira	W32/Ramnit.CD
eGambit	Unsafe.AI_Score_91%
MAX	malware (ai score=84)
Antiy-AVL	GrayWare/Win32.StartPage.gen
Endgame	malicious (high confidence)
Arcabit	Trojan.Generic.D1E46EFB
ZoneAlarm	Virus.Win32.Nimnul.a
Microsoft	Virus:Win32/Ramnit.A
Acronis	suspicious
ALYac	Trojan.GenericKD.31747835
VBA32	Adware.Searcher
Malwarebytes	Trojan.ChinAd
Zoner	Trojan.Win32.Ramnit.23698
ESET-NOD32	a variant of NSIS/TrojanDropper.Agent.BT
TrendMicro-HouseCall	PE_RAMNIT.H
Rising	Virus.Ramnit!1.9AA5 (CLASSIC:bWQ1OthrKJn0I5MRMbaW/2Wap+0)
SentinelOne	DFI – Suspicious PE
MaxSecure	Virus.Nimnul.A
BitDefenderTheta	AI:FileInfector.EAEEA7850C
AVG	Win32:RmnDrp
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	QVM42.0.Malware.Gen