MemScan:Trojan.Agent.EHHW information

The MemScan:Trojan.Agent.EHHW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What MemScan:Trojan.Agent.EHHW virus can do?

• Executable code extraction
• Possible date expiration check, exits too soon after checking local time
• Creates RWX memory
• Reads data out of its own binary image
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Anomalous binary characteristics

How to determine MemScan:Trojan.Agent.EHHW?

File Info:
crc32: A872A3EEmd5: 29bfb9ca1f63cdc8709678e9dd7e4aecname: 2062225.jpgsha1: ee231a9b19bd70bcbc4306b76f8253548ddd2b8esha256: a1b489732441eae086ef6a4c0a7cbf9ee5d933183551460391c2b91906cb285csha512: c63759c3814be188b1499f0821206e157bcbcf793015919b1c8a458b18769b036f90283c2fe598b1e8c797af5d238d19a73a766cecf71342773f1d72abdf7f58ssdeep: 49152:CEuN2wWqiww2HcMCY7BDOVHLVfT8bbhzTf5erzX9Hb7oNMeHE5Fso3W:CEuNbWqi67BDOVHLVfT8bbhzTf5erzXtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

MemScan:Trojan.Agent.EHHW also known as:

Bkav	W32.GenericBinderLnr.Trojan
MicroWorld-eScan	MemScan:Trojan.Agent.EHHW
CMC	HackTool.Win32.Binder!O
CAT-QuickHeal	VirTool.Vbinder.CO5
McAfee	Trojan-FDDZ!29BFB9CA1F63
Malwarebytes	HackTool.Binder
SUPERAntiSpyware	Trojan.Agent/Gen-Binder
K7AntiVirus	Trojan ( 004babd11 )
Alibaba	HackTool:Win32/Binder.44d01671
K7GW	Trojan ( 004babd11 )
Cybereason	malicious.a1f63c
Arcabit	Trojan.Agent.EHHW
Invincea	heuristic
BitDefenderTheta	Gen:NN.ZexaCO3.32250.LvW@aS0lkBjG
Cyren	W32/Backdoor.FVDJ-1096
Symantec	SMG.Heur!gen
TotalDefense	Win32/Tnega.AGBZ
Baidu	Win32.Trojan-Dropper.Binder.m
APEX	Malicious
ClamAV	Win.Trojan.Binder-6
Kaspersky	HackTool.Win32.Binder.bs
BitDefender	MemScan:Trojan.Agent.EHHW
Paloalto	generic.ml
AegisLab	Hacktool.Win32.Binder.lo77
Ad-Aware	MemScan:Trojan.Agent.EHHW
Emsisoft	Gen:Variant.Binder.1 (B)
Comodo	TrojWare.Win32.TrojanDropper.Binder.cls@4m6ovz
F-Secure	Heuristic.HEUR/AGEN.1026512
DrWeb	Trojan.MulDrop2.39589
VIPRE	Trojan-Dropper.Win32.Binder.bs (v)
TrendMicro	TrojanSpy.Win32.LOKI.SMAD1.hp
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.29bfb9ca1f63cdc8
Sophos	Mal/Fareit-V
SentinelOne	DFI – Malicious PE
F-Prot	W32/Backdoor2.HKXU
Jiangmin	HackTool.Binder.bh
Avira	HEUR/AGEN.1026512
MAX	malware (ai score=84)
Antiy-AVL	Trojan/Win32.Kryptik
Microsoft	VirTool:Win32/Vbinder.CO
Endgame	malicious (high confidence)
ViRobot	Trojan.Win32.A.Swisyn.49120
ZoneAlarm	HackTool.Win32.Binder.bs
GData	Win32.Trojan.Binder.A
AhnLab-V3	HackTool/Win32.Vbinder.R12127
Acronis	suspicious
VBA32	Binder.Celesty
ALYac	MemScan:Trojan.Agent.EHHW
Cylance	Unsafe
ESET-NOD32	Win32/TrojanDropper.Binder.NBH
TrendMicro-HouseCall	TrojanSpy.Win32.LOKI.SMAD1.hp
Rising	Dropper.Binder!1.AEB1 (CLASSIC)
Yandex	HackTool.Binder!IMtdREcP3/k
Ikarus	Trojan.Win32.Dorv
MaxSecure	HackTool.W32.Binder.bs
Fortinet	W32/Dropper.NBH!tr
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Win32/Trojan.Hacktool.4af

How to remove MemScan:Trojan.Agent.EHHW?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.