Categories: Trojan

Should I remove “Trojan:Win32/Malagent!gmb”?

The Trojan:Win32/Malagent!gmb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Malagent!gmb virus can do?

Creates RWX memory
Repeatedly searches for a not-found browser, may want to run with startbrowser=1 option
Unconventionial language used in binary resources: Portuguese (Brazilian)
The binary likely contains encrypted or compressed data.
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan:Win32/Malagent!gmb?


File Info:
crc32: 73744CFDmd5: 5f97b112fa1c17886a4691d73cb381b0name: UpdateComp.exesha1: 10fff8c5c0fe29fa2bb371e9fa3274f901ac9c29sha256: a0e8f2403eb3443547df39564c41d3915b1ab55221e8a4a775c93ca5b3ca8926sha512: 245b684f098645f130a4faa8ed1b612d6196118e30fbde7864b9d5dbbec946d31b92e7aa135c0286712bbd36233f4a64db1b44a13b627d40b5668c45c0720c7assdeep: 24576:4TRI5xcDQbnZmzxKbwFiaTEREb1TCFbqGFqTUheoAc:4TRyb2aSTEREJCFeGFM2xtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Trojan:Win32/Malagent!gmb also known as:

MicroWorld-eScan	Trojan.Crypt.Delf.E
McAfee	GenericRXDF-VS!5F97B112FA1C
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Spy.Delf.PGP
Avast	Win32:Banker-LDX [Trj]
Kaspersky	Trojan-Banker.Win32.BestaFera.apeh
BitDefender	Trojan.Crypt.Delf.E
NANO-Antivirus	Trojan.Win32.Agent.blwjlw
Ad-Aware	Trojan.Crypt.Delf.E
Emsisoft	Trojan.Crypt.Delf.E (B)
F-Secure	Trojan.Crypt.Delf.E
DrWeb	Trojan.Siggen7.55359
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
Sophos	Mal/Generic-S
Cyren	W32/GenBl.5F97B112!Olympus
Avira	TR/Agent.ndfgv
Kingsoft	Win32.PSWTroj.Agent.ag.(kcloud)
Microsoft	Trojan:Win32/Malagent!gmb
Endgame	malicious (high confidence)
Arcabit	Trojan.Crypt.Delf.E
ZoneAlarm	Trojan-Banker.Win32.BestaFera.apeh
GData	Trojan.Crypt.Delf.E
AhnLab-V3	Trojan/Win32.Agent.C1179839
ALYac	Trojan.Crypt.Delf.E
MAX	malware (ai score=95)
VBA32	TrojanPSW.Agent
Tencent	Win32.Trojan-qqpass.Qqrob.Szvr
Ikarus	Trojan-Spy.Win32.Banker
Fortinet	W32/Agent.AGAE!tr.pws
AVG	Win32:Banker-LDX [Trj]
Cybereason	malicious.2fa1c1
Qihoo-360	HEUR/QVM05.1.32D1.Malware.Gen