Trojan.Agent.Phoetel malicious file

The Trojan.Agent.Phoetel is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What Trojan.Agent.Phoetel virus can do?

• Executable code extraction
• Creates RWX memory
• Reads data out of its own binary image
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX

How to determine Trojan.Agent.Phoetel?

File Info:
crc32: ECB47AE5md5: 9614dbed925a368082a281ba77ec70b9name: chief.exesha1: 0b132697b64ef2c93efbb3443d135f733171d6aasha256: 3dcb61c8530dca57db103b359bfeef325b3495166ceff0c68449d597c4aa77basha512: abd11cd9a3a528dd194111fbd2a21052afc06f3c30117e4f81c0335cdf7537405d85f532b6a88c8cab3e875330a70677311b307a4ffa471c2f730a623c3bf5c3ssdeep: 12288:rquEdbHF6xC9D6DmR1J98w4oknqOOCyQfEyFC37BDWtw47Px9bX3:ydbl6kD68JmlotQfi37I7J9btype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
Translation: 0x0809 0x04b0

Trojan.Agent.Phoetel also known as:

MicroWorld-eScan	Trojan.GenericKD.32635446
FireEye	Generic.mg.9614dbed925a3680
CAT-QuickHeal	Trojan.Casur
McAfee	RDN/Generic.grp
Cylance	Unsafe
Zillya	Trojan.Injector.Win32.660910
K7AntiVirus	Trojan ( 0055a1591 )
BitDefender	Trojan.GenericKD.32635446
K7GW	Trojan ( 0055a1591 )
Cybereason	malicious.d925a3
TrendMicro	TROJ_GEN.R002C0PJP19
BitDefenderTheta	Gen:NN.ZexaCO3.32253.RmGfaSqytGoi
F-Prot	W32/AutoIt.MC.gen!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/Injector.Autoit.ELJ
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan.MSIL.Crypt.hiqm
Alibaba	Trojan:MSIL/Crypt.593db436
NANO-Antivirus	Trojan.Script.Vbs-heuristic.druvzi
Rising	Trojan.Obfus/Autoit!1.BD7E (CLASSIC)
Ad-Aware	Trojan.GenericKD.32635446
Emsisoft	Trojan.Autoit (A)
Comodo	Malware@#3kdqapon7iqho
F-Secure	Trojan.TR/Autoit.dearx
DrWeb	Trojan.Inject3.29319
VIPRE	Trojan.Win32.Generic!BT
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.SoftPulse.jc
Sophos	Mal/Generic-S
Ikarus	Trojan.Autoit
Cyren	W32/Trojan.OBCM-8505
Avira	TR/Autoit.dearx
Antiy-AVL	Trojan/Generic.ASVCS3S.1E5
Endgame	malicious (moderate confidence)
Arcabit	Trojan.Generic.D1F1FA36
AhnLab-V3	Malware/Win32.Generic.C3528440
ZoneAlarm	Trojan.MSIL.Crypt.hiqm
Microsoft	Trojan:Win32/Phoetel.ST!MTB
VBA32	Trojan.MSIL.Crypt
ALYac	Trojan.Agent.Phoetel
MAX	malware (ai score=100)
Malwarebytes	Trojan.MalPack.AutoIt
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0PJP19
SentinelOne	DFI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
GData	Trojan.GenericKD.32635446
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_60% (W)
Qihoo-360	Win32/Trojan.176

How to remove Trojan.Agent.Phoetel?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.