How to remove "Trojan.Win32.Agentb.kjhp"?

The Trojan.Win32.Agentb.kjhp is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Agentb.kjhp virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (2 unique times)
Creates RWX memory
A process attempted to delay the analysis task.
Performs some HTTP requests
Collects information about installed applications
Attempts to modify proxy settings

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Win32.Agentb.kjhp?


File Info:
crc32: BC9120CB
md5: 079cce6657c100aa3af7952631700678
name: 079CCE6657C100AA3AF7952631700678.mlw
sha1: 306b63f55b8ba18809955003d41313f3493baa82
sha256: 978a8858ac3adf2088106a658e2333dd30642f00c34b3f10975c3a7b99bb7f54
sha512: 3aaf001cd44b90356d9b111235b71db7e76f8656f033af2fa2bd2ac41409113c6ce894f653bd6e0f7d62d254fcf2b315a64c413109853504f3b0ae572043ea9f
ssdeep: 24576:uxumPtwAiyvA/7bGIkFXNr9ypZQf3E/DzLhukd5TkWCfTZgugu:g3Pvo/3G9XNr2A38XhDTkpfTZgugu
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Racebehind Corporation. All rights reserved
InternalName: Clear Scale Twosheet
FileVersion: 6.7.7.925
CompanyName: Racebehind Corporation
ProductName: Racebehindxae Then radioxae
ProductVersion: 6.7.7.925
FileDescription: Racebehind Then radio Ableshall
OriginalFilename: Last.dll
Translation: 0x0409 0x04b0

Trojan.Win32.Agentb.kjhp also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.36363577
FireEye	Generic.mg.079cce6657c100aa
McAfee	GenericRXNR-DT!079CCE6657C1
VIPRE	Win32.Malware!Drop
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
BitDefender	Trojan.GenericKD.36363577
K7GW	Trojan ( 005780601 )
K7AntiVirus	Trojan ( 005780601 )
Cyren	W32/Dridex.CB.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:CrypterX-gen [Trj]
Kaspersky	Trojan.Win32.Agentb.kjhp
Alibaba	Trojan:Win32/Dridex.bf6b8257
Ad-Aware	Trojan.GenericKD.36363577
Emsisoft	Trojan.GenericKD.36363577 (B)
Comodo	TrojWare.Win32.Agent.bgyft@0
F-Secure	Trojan.TR/AD.Dridex.tesdy
DrWeb	Trojan.Dridex.735
McAfee-GW-Edition	Artemis!Trojan
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Crypt
Avira	TR/AD.Dridex.tesdy
MAX	malware (ai score=83)
Microsoft	Trojan:Win32/Dridex.SS!MTB
Arcabit	Trojan.Generic.D22ADD39
ZoneAlarm	Trojan.Win32.Agentb.kjhp
GData	Trojan.GenericKD.36363577
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.RL_Generic.R366878
BitDefenderTheta	Gen:NN.ZedlaF.34574.cv8@a8NuSAmi
ALYac	Spyware.Banker.Dridex
ESET-NOD32	Win32/Dridex.DD
Rising	Trojan.Kryptik!8.8 (TFE:5:HK9PN0TZuzL)
eGambit	Unsafe.AI_Score_83%
Fortinet	W32/Kryptik.HJMZ!tr
Webroot	W32.Trojan.Gen
AVG	Win32:CrypterX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Dridex.HgkASPQA

How to remove Trojan.Win32.Agentb.kjhp?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

How to remove “Trojan.Win32.Agentb.kjhp”?