Categories: Trojan

Trojan.Agent.ELEG (B) removal guide

The Trojan.Agent.ELEG (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Agent.ELEG (B) virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
The binary likely contains encrypted or compressed data.
Executed a process and injected code into it, probably while unpacking
Tries to unhook or modify Windows functions monitored by Cuckoo
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.Agent.ELEG (B)?


File Info:
crc32: 280F99DFmd5: 5e8183e3395b2c6c6ac39d40d28f3f8aname: serverz.exesha1: f51db7e5d9dd7de25ee9b094a25a2fa593e8040dsha256: 6fd799e64e98e19e4fb4f82c62b673e389e7c4682368f7a3d88a723e241da68fsha512: be4138a2672d98822ec75b6892cd84120b2aee166bd332d961db812e8acd0c60f53fb7626aa29192304fcf6d9c1de09197959cd477d95c34c7a761fe5142731assdeep: 24576:eEPp7XK/s6PmxhF4/v1oJ/feOH/n3ENmNZ/3TXQoXfY:eEPo/lqveoPf08vxwtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Trojan.Agent.ELEG (B) also known as:

Bkav	W32.AIDetectVM.malware2
MicroWorld-eScan	Trojan.Agent.ELEG
Qihoo-360	Generic/Trojan.b35
McAfee	Fareit-FRB!5E8183E3395B
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.Agent.ELEG
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.5d9dd7
Invincea	heuristic
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.EKJS
APEX	Malicious
Paloalto	generic.ml
Kaspersky	UDS:DangerousObject.Multi.Generic
Alibaba	Trojan:Win32/GenKryptik.58c28a2b
Rising	Trojan.GenKryptik!8.AA55 (CLOUD)
Ad-Aware	Trojan.Agent.ELEG
Emsisoft	Trojan.Agent.ELEG (B)
DrWeb	Trojan.PWS.Stealer.23680
TrendMicro	Trojan.Win32.WACATAC.THBOEBO
McAfee-GW-Edition	BehavesLike.Win32.Fareit.tc
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.5e8183e3395b2c6c
Sophos	Mal/Fareit-V
SentinelOne	DFI – Suspicious PE
Webroot	W32.Adware.Gen
Fortinet	W32/Injector.DZGI!tr
Endgame	malicious (high confidence)
Arcabit	Trojan.Agent.ELEG
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Microsoft	Trojan:Win32/Occamy.C
AhnLab-V3	Win-Trojan/Delphiless.Exp
Acronis	suspicious
MAX	malware (ai score=82)
TrendMicro-HouseCall	Trojan.Win32.WACATAC.THBOEBO
Ikarus	Win32.Outbreak
eGambit	Unsafe.AI_Score_100%
GData	Trojan.Agent.ELEG
BitDefenderTheta	Gen:NN.ZelphiF.34084.cHX@ayAq3Xdi
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_100% (W)
MaxSecure	Trojan.Malware.300983.susgen