VBA/Agent.TT removal instruction

The VBA/Agent.TT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VBA/Agent.TT virus can do?

Injection (inter-process)
Injection with CreateRemoteThread in a remote process
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine VBA/Agent.TT?


File Info:
crc32: 01E74AF0
md5: e62899f7e76014d76bc850a5ff0a63fa
name: upload_file
sha1: e7d8cc051629ddc19e8f6b87befcfbbcd06e1c49
sha256: 4e40253b382b20e273edf82362f1c89e916f7ab8d3c518818a76cb6127d4e7c2
sha512: 2dfd8e733c4567790113c4a3d63fcf6aa90fc020c06b31c6790beff6965fe04662202f380aa12f80e83d186090fcc84a559222ef64e4ca7eacbedd3fd0441956
ssdeep: 768:ckkkkOl1SPM4jJer/VgIw8VfavoTNhPzpddJU6WEu8qt0bqI0I:idjYqsNhPjdOX8q0
type: Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.0

Version Info:
0: [No Data]

VBA/Agent.TT also known as:

DrWeb	Exploit.Siggen2.48430
AegisLab	Trojan.MSOffice.Agent.4!c
Symantec	W97M.Downloader
Cynet	Malicious (score: 85)
Kaspersky	HEUR:Trojan.MSOffice.Agent.gen
Comodo	Malware@#w851jwwf8js5
F-Secure	Malware.W97M/Agent.udrku
McAfee-GW-Edition	Artemis
Avira	W97M/Agent.udrku
ZoneAlarm	HEUR:Trojan.MSOffice.Agent.gen
ESET-NOD32	VBA/Agent.TT
Ikarus	Trojan.VBA.Agent
Qihoo-360	Generic/Trojan.ca1

How to remove VBA/Agent.TT?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

VBA/Agent.TT removal instruction