Categories: Malware

VBS:Agent-ED [Trj] malicious file

The VBS:Agent-ED [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VBS:Agent-ED [Trj] virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Guard pages use detected – possible anti-debugging.
Dynamic (imported) function loading detected
Reads data out of its own binary image
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
A scripting utility was executed

How to determine VBS:Agent-ED [Trj]?


File Info:
name: 991CA6A8FD6B69B9DBEF.mlwpath: /opt/CAPEv2/storage/binaries/3d108983e53ec8bf0e3dc5daaad1669ccf2335d2c1442dfde1dc5c6ea382498acrc32: 8DD156A2md5: 991ca6a8fd6b69b9dbef4d8712d50363sha1: 7e9e01c92d8d4ea288aa1e7372f09824306b3894sha256: 3d108983e53ec8bf0e3dc5daaad1669ccf2335d2c1442dfde1dc5c6ea382498asha512: d1cb5f5f7992727eb9dea5b07cb575d2a1a01697f8d5a769544524fcafde38c79391b8789d59a9f9203bf0ed73b40ceb6a1bc04448b65b273edad2c136be6ecdssdeep: 12288:gzy6rRxE2bpnfkjuVtPuVcG6YO/uV1ObuVtFnvysf1Q1TkAQTuiHd:z6rTlbp8iVtGVcG9pV1OqVtFnSQT39type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T125D4F145FB8640F2C4400B3065AF6236D73EFF052970B298ABDE7C2A68B7542F459B76sha3_384: 660da0413c492296249333fc43261f3b6857a24bc7b644463ed5c9703090b074d3de337c0aed313742002775b4b1e9c5ep_bytes: e82f2b000050e83f3101000000000090timestamp: 2007-05-22 04:59:14
Version Info:
0: [No Data]

VBS:Agent-ED [Trj] also known as:

DrWeb	BackDoor.PcClient.3131
MicroWorld-eScan	Win32.Sola.Gen
FireEye	Generic.mg.991ca6a8fd6b69b9
CAT-QuickHeal	Trojan.Orsam.A4
ALYac	Win32.Sola.Gen
Cylance	Unsafe
Sangfor	[RAR SFX]
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.8fd6b6
BitDefenderTheta	AI:FileInfector.49B167EC0E
VirIT	Trojan.Win32.MulDrop4.BZUC
Cyren	W32/Imaut.A.gen!Eldorado
Elastic	malicious (high confidence)
ESET-NOD32	multiple detections
TrendMicro-HouseCall	TROJ_AGENT_EK16009E.UVPM
Avast	VBS:Agent-ED [Trj]
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Script.Jobber.d
BitDefender	Win32.Sola.Gen
NANO-Antivirus	Trojan.Win32.PcClient.dgwtmn
SUPERAntiSpyware	Trojan.Agent/Gen-PCClient
Tencent	Virus.Win32.SOLA.c
Ad-Aware	Win32.Sola.Gen
Emsisoft	Win32.Sola.Gen (B)
Comodo	Backdoor.Win32.PcClient.d21@4gvmfr
Baidu	Multi.Threats.InArchive
TrendMicro	TROJ_AGENT_EK16009E.UVPM
McAfee-GW-Edition	Trojan-FDJM!991CA6A8FD6B
Trapmine	suspicious.low.ml.score
Sophos	Mal/Generic-R
Jiangmin	Trojan/RarDocument.c
Avira	TR/Dropper.Gen
Kingsoft	Win32.Troj.DeepScan.a.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Win32.Sola.Gen
AhnLab-V3	Dropper/PcClient.Gen
Acronis	suspicious
McAfee	Trojan-FDJM!991CA6A8FD6B
MAX	malware (ai score=89)
VBA32	Win32.Trojan.Dropper.Heur
Malwarebytes	Malware.AI.2947284507
APEX	Malicious
Rising	Malware.FakeDOC/ICON!1.9C3B (CLASSIC)
Yandex	Backdoor.PcClient!W7zsy3qaZ98
Ikarus	Virus.BAT.Agent
Fortinet	W32/Agent.AH
AVG	VBS:Agent-ED [Trj]
CrowdStrike	win/malicious_confidence_90% (W)