Trojan.Win32.Startun.vp (file analysis)

The Trojan.Win32.Startun.vp is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Startun.vp virus can do?

• Executable code extraction
• Presents an Authenticode digital signature
• Creates RWX memory
• Reads data out of its own binary image
• A process created a hidden window
• Drops a binary and executes it
• Mimics the file times of a Windows system file
• Exhibits possible ransomware file modification behavior
• Anomalous binary characteristics

Related domains:

How to determine Trojan.Win32.Startun.vp?

File Info:
crc32: 09B5A4E1
md5: f18edb89db073bc4e83a3cd8cf245604
name: Agent_Install.exe
sha1: 2edb00f6cc5701d0cd1bcb2b23b89ca0456451af
sha256: 9bfeea4014324b6f075b2dca79240a1ba7a59a33d7259b7fd5f557a49c0e6d3b
sha512: 4159cd08d03fa8eef7656340b4625259e6aad65f92dc74fb5a00a5cd5d3f5ca493b5ab0764e7edafa5f95b3f3ea22a7ded3e425524deb3121d0012578c543072
ssdeep: 98304:JsiIeWAD1N4iSCX7xyH7ZBNxHoq7dOBddhRtZpW/Aqxzn5jh:JsiXD1NJ7xyH7Hp0ZhRtvW4er1h
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (c) ConnectWise, Inc.. All rights reserved.
InternalName: setup
FileVersion: 19.0.275
CompanyName: ConnectWise, Inc.
ProductName: ConnectWise Automate Remote Agent
ProductVersion: 19.0.275
FileDescription: ConnectWise Automate Remote Agent
OriginalFilename: LabTechRemoteAgent.exe
Translation: 0x0409 0x04e4

Trojan.Win32.Startun.vp also known as:

How to remove Trojan.Win32.Startun.vp?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.