Win32/Agent.ABUK malicious file

The Win32/Agent.ABUK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Agent.ABUK virus can do?

• Attempts to connect to a dead IP:Port (87 unique times)
• Starts servers listening on 127.0.0.1:0
• HTTP traffic contains suspicious features which may be indicative of malware related traffic
• Performs some HTTP requests
• Unconventionial language used in binary resources: Russian
• Unusual version info supplied for binary

Related domains:

How to determine Win32/Agent.ABUK?

File Info:
crc32: 7D00C9F8
md5: a318e63e2446a954f0a6676a7effa27f
name: svchost.exe
sha1: 24904d31bf8bc1e718c88035a5a9df7f6e6d06c1
sha256: 9901673ab222a6b224e00b140b343f60c1b870f92ac6f6ad467421c626c5ff7a
sha512: 060eabe45ab5b9bd1c64c2bd24c8337d907f3601ccde42b6ffa269fddd104528469b96bb59dbe999c7ecc3b042d45ec884960749f86fe531d0ba158acd66a4ba
ssdeep: 24576:3bBdkwIksISScqE/xTTOtVLu/kumoB0jaR+a6H:30kH4wLyCo+1H
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: 22222222
FileVersion: 6.1.7600.16385
CompanyName: TODO: 
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.1.7600.16385
FileDescription: Host Process for Windows Services
OriginalFilename: svchost.exe
Translation: 0x0009 0x04b0

Win32/Agent.ABUK also known as:

How to remove Win32/Agent.ABUK?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.