Categories: Trojan

What is “Trojan.Agent.CGDB”?

The Trojan.Agent.CGDB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Agent.CGDB virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
A process created a hidden window
Creates an excessive number of UDP connection attempts to external IP addresses
Uses Windows utilities for basic functionality
Executed a process and injected code into it, probably while unpacking
Exhibits behavior characteristic of Cerber ransomware
Attempts to execute a binary from a dead or sinkholed URL
Writes a potential ransom message to disk
EternalBlue behavior
Attempts to access Bitcoin/ALTCoin wallets
Generates some ICMP traffic
Collects information to fingerprint the system
Anomalous binary characteristics
Uses suspicious command line tools or Windows utilities

How to determine Trojan.Agent.CGDB?


File Info:
crc32: 1724F0BAmd5: 131d1e05649216da7d3aac86cb0cb1edname: upload_filesha1: 3fccbf64126d9c4e7880e868722310d4aded9798sha256: 0d56de71fd541b777edbd246e23360cbcab6bddd2ed18ac078fcf29533738a93sha512: 684f670f7b052e32b499164376fb517c665b58d4380ec5df600a1a43c3a904ba07a152f0f1b0705751e3951b2bc0affdb8590663116c3b43853ab7f5d3e039e9ssdeep: 12288:2A9qvbK+YMWshiJurvJXD5ygDziPlHbHL+y6:QvW+6ADJTgyiPlHbr+y6type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0409 0x04b0LegalCopyright: EuronicsInternalName: PresningsFileVersion: 9.05.0006CompanyName: EuronicsLegalTrademarks: EuronicsComments: EuronicsProductName: EuronicsProductVersion: 9.05.0006FileDescription: EuronicsOriginalFilename: Presnings.exe

Trojan.Agent.CGDB also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Agent.CGDB
CAT-QuickHeal	Ransom.Zerber.V3
McAfee	PWSZbot-FAYC!131D1E056492
VIPRE	LooksLike.Win32.Beebone.a (v)
Sangfor	Malware
K7AntiVirus	Trojan ( 0050bb771 )
K7GW	Trojan ( 0050bb771 )
Cybereason	malicious.564921
Arcabit	Trojan.Agent.CGDB
Invincea	ML/PE-A + Mal/FareitVB-M
Cyren	W32/S-27a9827b!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan.Win32.VBKryjetor.alcp
BitDefender	Trojan.Agent.CGDB
NANO-Antivirus	Trojan.Win32.VBKryjetor.enwiee
Avast	Win32:Malware-gen
Rising	Ransom.Cerber!8.3058 (TFE:3:Cwe6T9mReeS)
Ad-Aware	Trojan.Agent.CGDB
Emsisoft	Trojan.Agent.CGDB (B)
F-Secure	Heuristic.HEUR/AGEN.1112811
DrWeb	Trojan.Encoder.10731
McAfee-GW-Edition	BehavesLike.Win32.Fareit.gm
Sophos	Mal/FareitVB-M
SentinelOne	DFI – Malicious PE
Avira	HEUR/AGEN.1112811
Antiy-AVL	Trojan/Win32.TSGeneric
AegisLab	Trojan.Win32.VBKryjetor.4!c
ZoneAlarm	Trojan.Win32.VBKryjetor.alcp
GData	Trojan.Agent.CGDB
Cynet	Malicious (score: 100)
AhnLab-V3	Win-Trojan/VBKrypt.RP.X1764
Acronis	suspicious
BitDefenderTheta	AI:Packer.230EAEDE21
ALYac	Trojan.Agent.CGDB
MAX	malware (ai score=89)
Cylance	Unsafe
ESET-NOD32	a variant of Win32/Injector.DNZQ
TrendMicro-HouseCall	TSPY_HPLOKI.SMDS
Tencent	Malware.Win32.Gencirc.10bb9d18
Yandex	Trojan.VBKryjetor!
Ikarus	Trojan.Agent
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/GenKryptik.CJGS!tr
AVG	Win32:Malware-gen
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (D)