TrojanSpy:Win32/Agent.GS information

The TrojanSpy:Win32/Agent.GS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanSpy:Win32/Agent.GS virus can do?

• Sample contains Overlay data
• Drops a binary and executes it
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Attempts to bypass application controls using the squiblydoo technique
• Creates a copy of itself
• Deletes executed files from disk
• Created a service that was not started
• Uses suspicious command line tools or Windows utilities

How to determine TrojanSpy:Win32/Agent.GS?

File Info:
name: 74F8FF81E9BD4630619D.mlw
path: /opt/CAPEv2/storage/binaries/4366919de284174c2f803a48374b60ffddc3638780f8ab54120f08f90c7fc546
crc32: 3A1CDCB9
md5: 74f8ff81e9bd4630619dcae6aa5fe43a
sha1: 3c0d1b346872a25d995d106fd967d832b8d88204
sha256: 4366919de284174c2f803a48374b60ffddc3638780f8ab54120f08f90c7fc546
sha512: dde344ec8d6c8d1515186a9de3df79f0ae6b2187179f0bd22b7af3daae30e5319c3053694350022bedab42c392bbbd2543a233874d01faa1a54b3e7b05d293ee
ssdeep: 1536:LFivstt0ekRRg6Jj5qesYQfAYM5k65ax/xGf149KRYJlX1ln+ahMzqVQfD4EAY:zrkw6DqUha249KRClX1lvEuWD4k
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T127C38D126AD35CA9CD24C5BB9C5ED136D772BC5256208AC713107A4F3F32392DA2AE4F
sha3_384: 3b912d5d8266acbae91191606712affe58c8a3abe23374e6d78b90f73af3c00c5f18db7ebd32f0b37deff5f371f894e9
ep_bytes: 558bec6aff68c86a400068705b400064
timestamp: 2009-01-06 15:03:23

Version Info:
0: [No Data]

TrojanSpy:Win32/Agent.GS also known as:

How to remove TrojanSpy:Win32/Agent.GS?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.