Categories: Trojan

TrojanClicker:Win32/Agent.S malicious file

The TrojanClicker:Win32/Agent.S is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanClicker:Win32/Agent.S virus can do?

A file was accessed within the Public folder.
Sample contains Overlay data
Uses Windows utilities for basic functionality
Performs HTTP requests potentially not found in PCAP.
Reads data out of its own binary image
Authenticode signature is invalid
Attempts to modify proxy settings
Deletes executed files from disk
Touches a file containing cookies, possibly for information gathering
Uses suspicious command line tools or Windows utilities

How to determine TrojanClicker:Win32/Agent.S?


File Info:
name: C6B2909287A6696875A8.mlwpath: /opt/CAPEv2/storage/binaries/574ff8a54268dd21e78f887df20685cb30209f7746197b21fad5193fc1529e69crc32: FE535949md5: c6b2909287a6696875a81af5308fd6d8sha1: edd4d1e47229bf5fc57ecb9f539e396decd5411esha256: 574ff8a54268dd21e78f887df20685cb30209f7746197b21fad5193fc1529e69sha512: 6fabd920680fe99867564b6478fb2f44aad22d25f52b165241caf75bead9e609a2ca6864cbde6c0161bd837016406a2c32a6fd91e1a48c9da1ee76202d5718dessdeep: 3072:xqBFJLzgOJJ4/Za0fe+CUGXQV8HiKxh2pvF+:wPdZ25fvtGXQV8CyEf+type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T107C3015377D06857EF9B4632416BCB39D7F78A6005229C4797223EB63E382825F2A742sha3_384: 828269ad3060ba2745e05a386ac7b8124ccc48487894669bfc11c8c652e3a789783da38999954ff66e7cfd1797776da0ep_bytes: 81ec8001000053555633db57895c2418timestamp: 2009-06-18 21:33:12
Version Info:
0: [No Data]

TrojanClicker:Win32/Agent.S also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.NSIS.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Nemesis.1730
FireEye	Gen:Variant.Nemesis.1730
CAT-QuickHeal	TrojanClicker.NSIS.Agent.S
Skyhigh	BehavesLike.Win32.GenDownloader.cc
McAfee	Artemis!C6B2909287A6
Cylance	unsafe
Zillya	Trojan.NSIS.Win32.5557
Sangfor	Downloader.Win32.Clicker.Vpjc
K7AntiVirus	Trojan-Downloader ( 0026b1c11 )
Alibaba	TrojanClicker:Win32/Snojan.dc5bb002
K7GW	Trojan-Downloader ( 0026b1c11 )
Cybereason	malicious.47229b
Arcabit	Trojan.Nemesis.D6C2
VirIT	Trojan.Win32.NSIS.BB
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	NSIS/TrojanDownloader.Agent.NHJ
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Trojan.NSIS-30
Kaspersky	Trojan-Clicker.Win32.NSIS.bb
BitDefender	Gen:Variant.Nemesis.1730
NANO-Antivirus	Trojan.Nsis.Agent.bstmny
Avast	NSIS:Downloader-QF [Trj]
Rising	Trojan.Win32.AVplayer.l (CLASSIC)
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Agent.ank.3
DrWeb	Trojan.Click2.14201
VIPRE	Gen:Variant.Nemesis.1730
TrendMicro	TROJ_CLICKR.SMIE
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Nemesis.1730 (B)
Ikarus	Trojan-Clicker.Win32.NSIS
Jiangmin	Trojan/Generic.adyzj
Webroot	W32.Trojan.Gen
Varist	W32/NSIS_Agent.O.gen!Eldorado
Avira	TR/Agent.ank.3
Antiy-AVL	Trojan[Downloader]/Win32.AdLoad.gen
Kingsoft	malware.kb.a.996
Microsoft	TrojanClicker:Win32/Agent.S
ZoneAlarm	Trojan-Clicker.Win32.NSIS.bb
GData	NSIS.Trojan.Clicker.C
Google	Detected
AhnLab-V3	Trojan/Win32.NSIS.R7368
VBA32	Trojan.MulDrop
ALYac	Gen:Variant.Nemesis.1730
MAX	malware (ai score=87)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_CLICKR.SMIE
Tencent	Trojan.Win32.Clicker.aad
SentinelOne	Static AI – Malicious PE
Fortinet	W32/ClickerNSS.BA!tr
AVG	NSIS:Downloader-QF [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)