Trojan.Agent.Phoetel malicious file

The Trojan.Agent.Phoetel is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What Trojan.Agent.Phoetel virus can do?

• Executable code extraction
• Creates RWX memory
• Reads data out of its own binary image
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX

How to determine Trojan.Agent.Phoetel?

File Info:
crc32: ECB47AE5
md5: 9614dbed925a368082a281ba77ec70b9
name: chief.exe
sha1: 0b132697b64ef2c93efbb3443d135f733171d6aa
sha256: 3dcb61c8530dca57db103b359bfeef325b3495166ceff0c68449d597c4aa77ba
sha512: abd11cd9a3a528dd194111fbd2a21052afc06f3c30117e4f81c0335cdf7537405d85f532b6a88c8cab3e875330a70677311b307a4ffa471c2f730a623c3bf5c3
ssdeep: 12288:rquEdbHF6xC9D6DmR1J98w4oknqOOCyQfEyFC37BDWtw47Px9bX3:ydbl6kD68JmlotQfi37I7J9b
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
Translation: 0x0809 0x04b0

Trojan.Agent.Phoetel also known as:

How to remove Trojan.Agent.Phoetel?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.