Categories: Malware

Mal/Agent-WB malicious file

The Mal/Agent-WB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mal/Agent-WB virus can do?

Unconventionial language used in binary resources: Russian
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Mal/Agent-WB?


File Info:
name: 9BF24D5F95CFDE8C5BE6.mlwpath: /opt/CAPEv2/storage/binaries/271059263cfe32f5589efb79495198386ef2b86a65a723439821304f7ff48087crc32: 82AC037Fmd5: 9bf24d5f95cfde8c5be63c7f87ce9b5asha1: 0a0ba4c0b8146920ab86364a1dafd1627bbf609bsha256: 271059263cfe32f5589efb79495198386ef2b86a65a723439821304f7ff48087sha512: ec0ee1f5ab2475cd1e33151adfe1be9c8213d410fecf9fd6dfe2dcdded744162c69721772afb294adf51849f03803c89ebb3ffa0521902d05bfd28bb2c3906eessdeep: 12288:RPjQwAjnh80+UYfBfZOXEU5fbhX346LuPt47lk/ixR:RPjtqnhs1JMHVbOsIktype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T116551A3A95FF1075E152C730FC0F46EE943DEEF13A14988627B869086D7AAF03CA5259sha3_384: 43c08685731f088f8d1b6f9204318afedb5941c2e292c90898c51328f7445f812b5098c6f1087bcc9347502457b17275ep_bytes: 558bec83c4f0b804044800e8605ff8fftimestamp: 1992-06-19 22:22:17
Version Info:
0: [No Data]

Mal/Agent-WB also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Generic.4!c
DrWeb	Trojan.Winlock.3020
MicroWorld-eScan	Gen:Trojan.ShellStartup.uHW@am0e0ngc
FireEye	Generic.mg.9bf24d5f95cfde8c
CAT-QuickHeal	Trojan.Generic.29498
McAfee	Artemis!9BF24D5F95CF
Cylance	Unsafe
Zillya	Trojan.Gimemo.Win32.51
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 001d6bfc1 )
Alibaba	Ransom:Win32/LockScreen.0b742372
K7GW	Trojan ( 001d6bfc1 )
Cybereason	malicious.f95cfd
BitDefenderTheta	Gen:NN.ZelphiF.34592.uHW@am0e0ngc
VirIT	Trojan.Win32.Generic.CMKD
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/LockScreen.YL
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.Gimemo-635
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Trojan.ShellStartup.uHW@am0e0ngc
NANO-Antivirus	Trojan.Win32.Gimemo.bskbuv
Avast	Win32:Trojan-gen
Tencent	Malware.Win32.Gencirc.10c27f3c
Ad-Aware	Gen:Trojan.ShellStartup.uHW@am0e0ngc
Sophos	Mal/Agent-WB
Comodo	Malware@#3ud0uwdqno8q3
F-Secure	Heuristic.HEUR/AGEN.1214373
VIPRE	Gen:Trojan.ShellStartup.uHW@am0e0ngc
McAfee-GW-Edition	BehavesLike.Win32.Generic.tm
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Trojan.ShellStartup.uHW@am0e0ngc (B)
GData	Gen:Trojan.ShellStartup.uHW@am0e0ngc
Jiangmin	Trojan/Gimemo.y
Google	Detected
Avira	HEUR/AGEN.1214373
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Generic.ASMalwS.294
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Ransom:Win32/LockScreen.AO
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Gimemo.C1970846
VBA32	TScope.Trojan.Delf
ALYac	Gen:Trojan.ShellStartup.uHW@am0e0ngc
Malwarebytes	Malware.Heuristic.1006
Rising	Trojan.Generic@AI.91 (RDML:8i59zQ7trCX6X2GcM8bdfw)
Yandex	Trojan.Gimemo!9AmKPD+Nhyw
Ikarus	Trojan.Win32.LockScreen
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/LockScreen.YL!tr
AVG	Win32:Trojan-gen
Panda	Generic Malware
CrowdStrike	win/malicious_confidence_100% (W)