Rootkit.Agent information

The Rootkit.Agent is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Rootkit.Agent virus can do?

Creates RWX memory
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
Installs itself for autorun at Windows startup
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Rootkit.Agent?


File Info:
crc32: 94369590
md5: cfd6c5e2e4d83cf6682c13c7817f9f2e
name: l000000000222776.exe.eres
sha1: bd523fa79bb3c57011ef78642bef8ff6925b3890
sha256: ecd59722ff78cbbb15704584f39a6f934dfde1b5253467c60d03f6532bf5c353
sha512: 6e0ea7b76182f0a164ae8936106172a6e29d5208e21cb61e8344e0518fdd5bd5512a551c6e540cfd1f1826f4da7f1fa31e77737f789da1a93004a87e0279e20f
ssdeep: 24576:5B7wXZUICt8rS9EpTrvkEbqZxJ8i94+Dh3cUfU7ek:5hGZdu9E+s/R+DNEX
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 1998 Oakley Data Services
InternalName: WebCompiler
FileVersion: 1.35.0.2
CompanyName: Oakley Data Services
LegalTrademarks: WebCompiler is a Trademark of Oakley Data Services
Comments: 
ProductName: WebCompiler
ProductVersion: 1.35
FileDescription: WebCompiler
OriginalFilename: 
Translation: 0x0809 0x04e4

Rootkit.Agent also known as:

CAT-QuickHeal	Trojan.GenericCS.S395922
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
SUPERAntiSpyware	Trojan.Agent/Gen-Dropper
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Invincea	heuristic
Cyren	W32/A-237cbbf6!Eldorado
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R002C0PE718
Paloalto	generic.ml
ClamAV	Win.Trojan.Tufik-12
Avast	Win32:Malware-gen
TrendMicro	TROJ_GEN.R002C0PE718
McAfee-GW-Edition	BehavesLike.Win32.Dropper.cc
F-Prot	W32/A-237cbbf6!Eldorado
Webroot	W32.Malware.Gen
AegisLab	Ml.Attribute.Gen!c
Microsoft	Trojan:Win32/Zpevdo.A
McAfee	RDN/Generic.grp
AVware	Trojan.Win32.Generic!BT
VBA32	Rootkit.Agent
Ikarus	W32.Vetor
AVG	Win32:Malware-gen
CrowdStrike	malicious_confidence_60% (W)

How to remove Rootkit.Agent?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.