Categories: Malware

UDS:AdWare.Win32.Agent.xxyoxl information

The UDS:AdWare.Win32.Agent.xxyoxl is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What UDS:AdWare.Win32.Agent.xxyoxl virus can do?

Executable code extraction
Creates RWX memory
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine UDS:AdWare.Win32.Agent.xxyoxl?


File Info:
crc32: D001A26Amd5: fa8f555772e31e3301a340b52d82e37ename: FA8F555772E31E3301A340B52D82E37E.mlwsha1: cfc9a12c687638008b9f609de8116b57ad9e2033sha256: 116a4c0e1b30aa7a7a98fda02a80e1fc63fc78f3d690c4b4409c52ca2a04e16dsha512: 93f5e92374db462a807bba7c39bbca7a1e93d4b62a10fac2bc5f3b49ca8a8b1d29739f7304971e1bd7a40d2c1cf799e96b8c40145b402686c03bf2c616588ae0ssdeep: 1536:Z9msA3j7fY/c5acVaDZCZN5wCm0vOjs62Py2ZDiVIwpr7wgB+2XrSGl/c6Iow:mq/c5acU1u/w1Sg5L7TBGGB1wtype: PE32 executable (GUI) Intel 80386, for MS Windows, PECompact2 compressed
Version Info:
Translation: 0x0804 0x04b0LegalCopyright: x7267x91cex5de5x4f5cx5ba4InternalName: x9b54x517dx6539x952ex7cbex7075FileVersion: 4.06.0005CompanyName: x7267x91cex5de5x4f5cx5ba4ProductName: x9b54x517dx6539x952ex7cbex7075ProductVersion: 4.06.0005FileDescription: x9b54x517dx6539x952ex5de5x5177OriginalFilename: x9b54x517dx6539x952ex7cbex7075.exe

UDS:AdWare.Win32.Agent.xxyoxl also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 004bcce71 )
Lionic	Adware.Win32.Agent.2!c
DrWeb	Trojan.DownLoader7.46108
Cylance	Unsafe
Zillya	Adware.Agent.Win32.135420
Sangfor	Trojan.Win32.Wacatac.A
Alibaba	AdWare:Win32/Generic.d3b694fa
K7GW	Trojan ( 004bcce71 )
Cybereason	malicious.c68763
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
Kaspersky	not-a-virus:UDS:AdWare.Win32.Agent.xxyoxl
NANO-Antivirus	Trojan.Win32.Zusy.edzmni
Sophos	Mal/Generic-S (PUA)
Comodo	Malware@#3koest4fko0qk
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	ADW_ONESTEP
McAfee-GW-Edition	BehavesLike.Win32.Trojan.mc
FireEye	Generic.mg.fa8f555772e31e33
SentinelOne	Static AI – Malicious PE
Webroot	W32.Malware.Gen
Microsoft	PUA:Win32/Presenoker
McAfee	GenericRXAA-AA!FA8F555772E3
VBA32	Adware.Agent
Malwarebytes	Trojan.Agent
TrendMicro-HouseCall	ADW_ONESTEP
Yandex	Trojan.DownLoader!aiw0orevQRU
Ikarus	Trojan.Win32.Agent
MaxSecure	Trojan.Malware.74345720.susgen
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml