About “Trojan.Dropper.Agent.VDC” infection

The Trojan.Dropper.Agent.VDC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Dropper.Agent.VDC virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan.Dropper.Agent.VDC?


File Info:
name: 471811B033F629495EF9.mlw
path: /opt/CAPEv2/storage/binaries/26d61e31c92e9f934b302f901274071afdc3142d4db93ad14110791f3a565662
crc32: 1C6A0B6A
md5: 471811b033f629495ef9d921989c45df
sha1: 1f564276ac608bb422c0e9f816888b7fa58f12a7
sha256: 26d61e31c92e9f934b302f901274071afdc3142d4db93ad14110791f3a565662
sha512: ff351e31a7bf947e2ec8db4933390a3895b66303a2f19cc8403e74e4bb05d05f86c4d05ab2743ca8021a7e7e443257ee4b714d335114fab04b9814e8cc3d065e
ssdeep: 6144:+1ilFhJmWT4flAkLd+yu/UVEFeqjhTmWvQtQhqaQ/bnebUdd:SWT4dAkoyu//7jhTNjqaQ/bnL
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T117946C11B6C0C072C16B243908A6E775677EBE31CFA196CB3B943B7E5E302D15E3925A
sha3_384: aad07284f7f5742a0c58de4c8ec218abbecebfb03ffa1feb78d3216579be46d40cffe3a080b4e0647a9eaac20d0e5843
ep_bytes: e8d8480000e979feffff3b0d60ce4200
timestamp: 2008-11-23 07:49:00

Version Info:
0: [No Data]

Trojan.Dropper.Agent.VDC also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Dropper.Agent.VDC
ClamAV	Win.Adware.Henbang-9942124-0
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Adware.Agent.Win32.139995
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Adware ( 0006465f1 )
K7GW	Adware ( 0006465f1 )
Arcabit	Trojan.Dropper.Agent.VDC
Baidu	Win32.Worm.AutoRun.c
VirIT	Trojan.Win32.Generic.AEJE
Cyren	W32/Risk.TDQL-8749
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Adware.Agent.NKI
Cynet	Malicious (score: 100)
Kaspersky	Worm.Win32.AutoRun.ibh
BitDefender	Trojan.Dropper.Agent.VDC
NANO-Antivirus	Trojan.Win32.AutoRun.cqpmwl
Avast	Win32:GenMaliciousA-FTB [Adw]
Sophos	Troj/Agent-INK
F-Secure	Adware:W32/Henbang.H
DrWeb	Trojan.MulDrop.32523
VIPRE	Trojan.Dropper.Agent.VDC
McAfee-GW-Edition	BehavesLike.Win32.Generic.gh
FireEye	Trojan.Dropper.Agent.VDC
Emsisoft	Trojan.Dropper.Agent.VDC (B)
Ikarus	Worm.Win32.AutoRun
Jiangmin	Adware/Agent.brf
Avira	TR/Drop.Henbang.A.4
MAX	malware (ai score=86)
Xcitium	ApplicUnwnt.Win32.Adware.Agent.ono0@1ej351
Microsoft	Program:Win32/Wacapew.C!ml
ViRobot	Dropper.Agent.472576
ZoneAlarm	Worm.Win32.AutoRun.ibh
GData	Win32.Trojan.Webdat.A
Google	Detected
VBA32	AdWare.Agent
Cylance	unsafe
APEX	Malicious
Rising	AdWare.Win32.Agent.cmd (CLASSIC)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Generic.AC.75829!tr
AVG	Win32:GenMaliciousA-FTB [Adw]
DeepInstinct	MALICIOUS
CrowdStrike	win/grayware_confidence_60% (W)

How to remove Trojan.Dropper.Agent.VDC?

Trojan.Dropper.Agent.VDC removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X