Categories: Trojan

Trojan.Agent.AROC removal guide

The Trojan.Agent.AROC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Agent.AROC virus can do?

Executable code extraction
Injection (inter-process)
Injection with CreateRemoteThread in a remote process
Creates RWX memory
The binary likely contains encrypted or compressed data.
Code injection with CreateRemoteThread in a remote process
Sniffs keystrokes
A process attempted to delay the analysis task by a long amount of time.
Installs itself for autorun at Windows startup
Creates a hidden or system file
Creates known SpyNet mutexes and/or registry changes.
Anomalous binary characteristics

Related domains:

myhackth.myftp.org

How to determine Trojan.Agent.AROC?


File Info:
crc32: 3ABFDB17md5: 9d11a0789ac98f55a436d6ff055662c5name: 9D11A0789AC98F55A436D6FF055662C5.mlwsha1: 5299c27663af2ae9782d96486148f7ccc241a6f4sha256: cc1eecb697a93124a9b290d5bcfa7adac4850cd1ccb78ea12c1540c5fc59f602sha512: a378c15c5cd7e0c921d5ba67611ca7d8c71e43eff1df245fd88ae2be405f2f50aaf79a3fae71d416e1b24c15e6d657f925345616b0109822135741a87fb86ca6ssdeep: 6144:gOpslFlqPqW4TqW4TqW4HhdBCkWYxuukP1pjSKSNVkq/MVJbb:gwslw4t4t4HTBd47GLRMTbbtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Trojan.Agent.AROC also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Agent.AROC
FireEye	Generic.mg.9d11a0789ac98f55
CAT-QuickHeal	Worm.Rebhip.A8
ALYac	Trojan.Agent.AROC
Cylance	Unsafe
VIPRE	Trojan.Win32.Llac.bdm (v)
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 001987931 )
BitDefender	Trojan.Agent.AROC
K7GW	Trojan ( 001987931 )
Cybereason	malicious.89ac98
Baidu	Win32.Trojan.Agent.co
Cyren	W32/Trojan.GERG-2270
Symantec	W32.Spyrat
TotalDefense	Win32/Llac.AA
APEX	Malicious
Avast	Win32:BackDoor-ACX [Trj]
ClamAV	Win.Trojan.Agent-36200
Kaspersky	Trojan.Win32.Bublik.elhu
NANO-Antivirus	Trojan.Win32.Llac.dsnuug
ViRobot	Trojan.Win32.A.Llac.296448
Tencent	Trojan.Win32.FakePic.st
Ad-Aware	Trojan.Agent.AROC
Emsisoft	Trojan.Agent.AROC (B)
Comodo	Worm.Win32.AutoRun.BDZ@4obei9
F-Secure	Worm.WORM/Rebhip.A.9877
DrWeb	Win32.HLLW.Autoruner.25074
Zillya	Trojan.Llac.Win32.1411
TrendMicro	TSPY_LLAC.SM
McAfee-GW-Edition	BehavesLike.Win32.PUPXDZ.fc
MaxSecure	Trojan.W32.LLAC.HAS
Sophos	Mal/Generic-R + Mal/Behav-328
Ikarus	not-a-virus:Monitor.Win32.Perflogger
Jiangmin	Trojan/Generic.aiia
Avira	WORM/Rebhip.A.9877
MAX	malware (ai score=81)
Antiy-AVL	Trojan/Win32.Llac.cxsz
Microsoft	TrojanSpy:Win32/Rebhip.C
Gridinsoft	Trojan.Win32.Agent.vb!s1
Arcabit	Trojan.Agent.AROC
ZoneAlarm	Trojan.Win32.Bublik.elhu
GData	Trojan.Agent.AROC
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Llac.R1845
Acronis	suspicious
McAfee	Generic PWS.sz
TACHYON	Trojan/W32.DP-Bublik.347648
VBA32	Trojan.Bublik
Malwarebytes	Trojan.PasswordStealer
Panda	Trj/Spy.YM
Zoner	Trojan.Win32.2334
ESET-NOD32	Win32/Spatet.I
TrendMicro-HouseCall	TSPY_LLAC.SM
Rising	Malware.Heuristic!ET#100% (RDMK:cmRtazr4vAht3Due3IXZkzgDE1Ky)
Yandex	Trojan.GenAsa!DgBwrnzSK6c
SentinelOne	Static AI – Malicious PE
eGambit	RAT.CyberGate
Fortinet	W32/Spatet.TRR!tr
BitDefenderTheta	AI:Packer.A66A468F21
AVG	Win32:BackDoor-ACX [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Trojan.Win32.Inject.B