Categories: Rootkit

Rootkit.Agent information

The Rootkit.Agent is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Rootkit.Agent virus can do?

Creates RWX memory
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
Installs itself for autorun at Windows startup
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Rootkit.Agent?


File Info:
crc32: 94369590md5: cfd6c5e2e4d83cf6682c13c7817f9f2ename: l000000000222776.exe.eressha1: bd523fa79bb3c57011ef78642bef8ff6925b3890sha256: ecd59722ff78cbbb15704584f39a6f934dfde1b5253467c60d03f6532bf5c353sha512: 6e0ea7b76182f0a164ae8936106172a6e29d5208e21cb61e8344e0518fdd5bd5512a551c6e540cfd1f1826f4da7f1fa31e77737f789da1a93004a87e0279e20fssdeep: 24576:5B7wXZUICt8rS9EpTrvkEbqZxJ8i94+Dh3cUfU7ek:5hGZdu9E+s/R+DNEXtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: xa9 1998 Oakley Data ServicesInternalName: WebCompilerFileVersion: 1.35.0.2CompanyName: Oakley Data ServicesLegalTrademarks: WebCompiler is a Trademark of Oakley Data ServicesComments: ProductName: WebCompilerProductVersion: 1.35FileDescription: WebCompilerOriginalFilename: Translation: 0x0809 0x04e4

Rootkit.Agent also known as:

CAT-QuickHeal	Trojan.GenericCS.S395922
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
SUPERAntiSpyware	Trojan.Agent/Gen-Dropper
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Invincea	heuristic
Cyren	W32/A-237cbbf6!Eldorado
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R002C0PE718
Paloalto	generic.ml
ClamAV	Win.Trojan.Tufik-12
Avast	Win32:Malware-gen
TrendMicro	TROJ_GEN.R002C0PE718
McAfee-GW-Edition	BehavesLike.Win32.Dropper.cc
F-Prot	W32/A-237cbbf6!Eldorado
Webroot	W32.Malware.Gen
AegisLab	Ml.Attribute.Gen!c
Microsoft	Trojan:Win32/Zpevdo.A
McAfee	RDN/Generic.grp
AVware	Trojan.Win32.Generic!BT
VBA32	Rootkit.Agent
Ikarus	W32.Vetor
AVG	Win32:Malware-gen
CrowdStrike	malicious_confidence_60% (W)