Categories: Trojan

What is “Trojan.Agent.RNS”?

The Trojan.Agent.RNS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Agent.RNS virus can do?

Creates RWX memory
Expresses interest in specific running processes
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs
Collects information to fingerprint the system
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Agent.RNS?


File Info:
crc32: D072D920md5: 910395e1b04866a7a6d64b2c80702a03name: 1.exesha1: c70147c4b5eba286de4ffdf78031fa411c90d83fsha256: c7235c56f4d4d5cbfbee677f2949049e98a4ff9c10fc3a399f53d278477f6025sha512: dc2a1bd99a07017c98edc344428fea49d738c147cd39ed3627bb8c351191d8604fc993e0839f9b6bbf6a4f6029c6b79be37a10713854af4d3901931b27972471ssdeep: 3072:wBgjS2GJyRGvl3hF85k+6LLH1zN14GPEdGVM9h9kKhnsE7vN7RzbPcPNyewtT:wfMG9RFsULVxbPEdGV0AIscbPcPNrtype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
0: [No Data]

Trojan.Agent.RNS also known as:

MicroWorld-eScan	Gen:Trojan.ShellStartup.lmGfaGWZNppc
CMC	Trojan-Ransom.Win32.Gimemo!O
CAT-QuickHeal	Ransom.Somhoveran.C8
McAfee	Artemis!910395E1B048
Cylance	Unsafe
SUPERAntiSpyware	Trojan.Agent/Gen-Graftor
K7GW	Trojan ( 7000000f1 )
K7AntiVirus	Trojan ( 7000000f1 )
Arcabit	Trojan.ShellStartup.lmGfaGWZNppc
Invincea	heuristic
NANO-Antivirus	Trojan.Win32.Gimemo.dpubxw
Cyren	W32/A-32df3ff0!Eldorado
Symantec	SMG.Heur!gen
TotalDefense	Win32/Tnega.AVPY
TrendMicro-HouseCall	Mal_LockScreen
Avast	Win32:Evo-gen [Susp]
ClamAV	Win.Ransomware.Gimemo-6725202-0
GData	Gen:Trojan.ShellStartup.lmGfaGWZNppc
Kaspersky	Trojan-Ransom.Win32.Gimemo.cdqu
BitDefender	Gen:Trojan.ShellStartup.lmGfaGWZNppc
Tencent	Ransom.Win32.Gmie.a
Ad-Aware	Gen:Trojan.ShellStartup.lmGfaGWZNppc
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Strictor.oiuya
DrWeb	Trojan.KillProc.26668
Zillya	Trojan.Gimemo.Win32.8819
TrendMicro	Mal_LockScreen
McAfee-GW-Edition	BehavesLike.Win32.Generic.cc
Trapmine	suspicious.low.ml.score
Emsisoft	Gen:Trojan.ShellStartup.lmGfaGWZNppc (B)
SentinelOne	static engine – malicious
F-Prot	W32/A-32df3ff0!Eldorado
Jiangmin	Trojan.Gimemo.lh
Avira	TR/Strictor.oiuya
Antiy-AVL	Trojan[Ransom]/Win32.Gimemo.bdvq
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Fuery.B!cl
Endgame	malicious (moderate confidence)
ZoneAlarm	Trojan-Ransom.Win32.Gimemo.cdqu
TACHYON	Ransom/W32.DP-Gimemo.446464
AhnLab-V3	Trojan/Win32.Gimemo.R87557
VBA32	TScope.Trojan.Delf
ALYac	Gen:Trojan.ShellStartup.lmGfaGWZNppc
MAX	malware (ai score=94)
Malwarebytes	Trojan.Agent.RNS
ESET-NOD32	a variant of Win32/LockScreen.AWI
Rising	Trojan.LockScreen!1.AA76 (RDM+:cmRtazqYh3H00jvOKQaTZfY5JGJb)
Yandex	Trojan.GreenLock.Gen.UO
Ikarus	Trojan-Ransom.Win32.Gimemo
Fortinet	W32/LockScreen.AW!tr
AVG	FileRepMalware
Cybereason	malicious.1b0486
Panda	Trj/Genetic.gen
CrowdStrike	malicious_confidence_70% (D)