Trojan

How to remove “Trojan.Agent.CYBU”?

Malware Removal

The Trojan.Agent.CYBU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.CYBU virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process created a hidden window
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Attempts to identify installed AV products by registry key
  • Anomalous binary characteristics

How to determine Trojan.Agent.CYBU?


File Info:

crc32: 68685CE2
md5: ecf1c240745dfcc3e4ae8b068c56d0f4
name: ECF1C240745DFCC3E4AE8B068C56D0F4.mlw
sha1: 921ae756278de6656eb30804dad093e4209eed28
sha256: 237e64613f654dcabce9f6dd9b18dea058f07b0635edc9d7bc8d6ca3301f073e
sha512: 5d7b1d55f691ec8fab0a7e320421780c2ccfae3af7fbf396f0bb97a52ac11dcdcc0bc4e8b581646902f875022dd58816b8a15a2e24808ba2a19d2b496cc2b2db
ssdeep: 12288:LgEjpgz/yE95mF23OewQrGA5pl5xR0KZNRi:LgEk/y05KGrNpNRpNRi
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 1996-2016 VideoLAN and VLC Authors
InternalName: vlc
FileVersion: 2.2.4
CompanyName: VideoLAN
LegalTrademarks: VLC media player, VideoLAN and x264 are registered trademarks from VideoLAN
ProductName: VLC media player
ProductVersion: 2,2,4,0
FileDescription: VLC media player
OriginalFilename: vlc.exe
Translation: 0x0409 0x04e4

Trojan.Agent.CYBU also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0052eae91 )
LionicTrojan.Win32.Yakes.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Siggen7.48994
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Yakes.S2477262
ALYacTrojan.Agent.CYBU
CylanceUnsafe
ZillyaTrojan.Yakes.Win32.68422
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
K7GWTrojan ( 0052eae91 )
Cybereasonmalicious.0745df
CyrenW32/Agent.ARF.gen!Eldorado
ESET-NOD32a variant of Win32/Kryptik.GFWR
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Agent.CYBU
NANO-AntivirusTrojan.Win32.Yakes.famkhc
MicroWorld-eScanTrojan.Agent.CYBU
TencentMalware.Win32.Gencirc.10c8c8fc
Ad-AwareTrojan.Agent.CYBU
SophosMal/Generic-S
ComodoTrojWare.Win32.Yakes.GGF@7mso73
BitDefenderThetaGen:NN.ZexaF.34294.Oq0@aiITs2li
VIPRETrojan.Win32.Generic!BT
TrendMicroTrojanSpy.Win32.TRICKBOT.SMB.hp
McAfee-GW-EditionBehavesLike.Win32.Ransomware.jh
FireEyeGeneric.mg.ecf1c240745dfcc3
EmsisoftTrojan.Agent.CYBU (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Yakes.znd
AviraHEUR/AGEN.1127894
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.25D7DB9
MicrosoftTrojanProxy:Win32/Bunitu.Q!bit
ArcabitTrojan.Agent.CYBU
GDataTrojan.Agent.CYBU
TACHYONTrojan/W32.Agent.655872.DA
AhnLab-V3Trojan/Win32.RL_Bunitu.R288704
Acronissuspicious
McAfeePacked-FEE!ECF1C240745D
MAXmalware (ai score=99)
VBA32BScope.Trojan.Yakes
MalwarebytesMalware.AI.4031647231
PandaTrj/Genetic.gen
TrendMicro-HouseCallTrojanSpy.Win32.TRICKBOT.SMB.hp
RisingTrojan.Kryptik!1.C745 (CLASSIC)
YandexTrojan.GenAsa!xo8Q0n5qynA
IkarusTrojan-Ransom.Crypted007
MaxSecureTrojan.Malware.7164915.susgen
FortinetW32/Kryptik.GWSH!tr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml

How to remove Trojan.Agent.CYBU?

Trojan.Agent.CYBU removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment