Categories: Trojan

TrojanClicker:Win32/Agent.S information

The TrojanClicker:Win32/Agent.S is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanClicker:Win32/Agent.S virus can do?

A file was accessed within the Public folder.
Sample contains Overlay data
Uses Windows utilities for basic functionality
Performs HTTP requests potentially not found in PCAP.
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Behavioural detection: Injection (Process Hollowing)
Behavioural detection: Injection (inter-process)
Attempts to modify proxy settings
Deletes executed files from disk
Touches a file containing cookies, possibly for information gathering
Uses suspicious command line tools or Windows utilities

How to determine TrojanClicker:Win32/Agent.S?


File Info:
name: A8E67D6E2846420F608D.mlwpath: /opt/CAPEv2/storage/binaries/bcd7e0f59b47588f74f85a68ac90b19ebf48259c08fe1145de78498981d5f90ecrc32: 2058D5CBmd5: a8e67d6e2846420f608de548b9d0a432sha1: 862359b25d29b7c2b8cb6cb7346e09180fdc0a2bsha256: bcd7e0f59b47588f74f85a68ac90b19ebf48259c08fe1145de78498981d5f90esha512: 7042948c390d00c076958fbddd85d7a30e22a8babcf33ce63a10717d249107907f4d3999be5a229db9ba752429bbc5b8a9bca43bb18f97405ab13d70eb708071ssdeep: 3072:xqBFJLzgOJJQa0fe+CUGXQV8HiKxh2pvFo:wPdZQfvtGXQV8CyEfotype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1BDC3F15377D0A457DF974632516BCB39D7F78A6004129C5B87213EFA3E342825B2A707sha3_384: 4247ed0110fc1a1657b29ad689b8cd6953ee112f61e6ef55d6ab73279a7fbcef164d18bbe0943b6536fb38700cdf2b46ep_bytes: 81ec8001000053555633db57895c2418timestamp: 2009-06-18 21:33:12
Version Info:
0: [No Data]

TrojanClicker:Win32/Agent.S also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.NSIS.4!c
DrWeb	Trojan.DownLoader3.35746
MicroWorld-eScan	Gen:Variant.Nemesis.1730
ClamAV	Win.Trojan.NSIS-30
FireEye	Gen:Variant.Nemesis.1730
CAT-QuickHeal	TrojanClicker.NSIS.Agent.S
Skyhigh	BehavesLike.Win32.GenDownloader.cc
ALYac	Gen:Variant.Nemesis.1730
Malwarebytes	Trojan.Clicker.Generic
Zillya	Trojan.NSIS.Win32.4372
Sangfor	Downloader.Win32.Clicker.V30i
K7AntiVirus	Trojan-Downloader ( 0026b1c11 )
Alibaba	TrojanClicker:Win32/Snojan.9b377b1f
K7GW	Trojan-Downloader ( 0026b1c11 )
Cybereason	malicious.25d29b
Arcabit	Trojan.Nemesis.D6C2
Symantec	Trojan.Gen.MBT
Elastic	malicious (high confidence)
ESET-NOD32	NSIS/TrojanDownloader.Agent.NHJ
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Clicker.Win32.NSIS.bb
BitDefender	Gen:Variant.Nemesis.1730
NANO-Antivirus	Trojan.Nsis.Agent.bstmny
Avast	NSIS:Downloader-QF [Trj]
Rising	Trojan.Win32.AVplayer.l (CLASSIC)
Emsisoft	Gen:Variant.Nemesis.1730 (B)
F-Secure	Trojan.TR/Agent.ank.3
VIPRE	Gen:Variant.Nemesis.1730
TrendMicro	TROJ_CLICKR.SMIE
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-R
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Generic.adyzj
Webroot	W32.Trojan.Gen
Google	Detected
Avira	TR/Agent.ank.3
MAX	malware (ai score=86)
Antiy-AVL	Trojan[Clicker]/Win32.NSIS.bb
Kingsoft	malware.kb.a.997
Microsoft	TrojanClicker:Win32/Agent.S
ZoneAlarm	Trojan-Clicker.Win32.NSIS.bb
GData	Gen:Variant.Nemesis.1730
Varist	W32/NSIS_Agent.O.gen!Eldorado
AhnLab-V3	Trojan/Win32.NSIS.R7368
McAfee	Artemis!A8E67D6E2846
VBA32	Trojan.MulDrop
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_CLICKR.SMIE
Tencent	Trojan.Win32.Clicker.aad
Ikarus	Trojan-Clicker.Win32.NSIS
Fortinet	W32/ClickerNSS.BA!tr
AVG	NSIS:Downloader-QF [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)