About “Win32/Agent.ADRC” infection

The Win32/Agent.ADRC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Agent.ADRC virus can do?

Reads data out of its own binary image
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/Agent.ADRC?


File Info:
crc32: 4B5AC027
md5: ed5e1cdece46061986d0ba83f6a2972b
name: ED5E1CDECE46061986D0BA83F6A2972B.mlw
sha1: 01e4c9fb52540ffb3876939c4e6c7cc3380ba586
sha256: fbf2d978c7c3078f5c6b38ff66dbf6672069e1869ea5d50b3a0961a53f717e09
sha512: 13d21893c421d024500d1b28a91f11539fb04765211de82a1bfa9ac07ff07e02f7bbbba5e441e4e6e489a1e61a34005fe99aac80e3acec09e714510490a4ac48
ssdeep: 49152:E1Z03G7L/cji5ocWf/qTB/AQ33odNHEmDm5JvC:4ZWG3MZn0n33oDHbDGK
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: hogsty
ProductVersion: 1.0.0.0
FileVersion: 1.0.0.0
FileDescription: 
Translation: 0x0000 0x04b0

Win32/Agent.ADRC also known as:

K7AntiVirus	Trojan ( 0056e5201 )
Elastic	malicious (high confidence)
DrWeb	Program.Unwanted.2520
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.38054800
K7GW	Trojan ( 0056e5201 )
Cyren	W32/Trojan.IINM-3642
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Agent.ADRC
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
ClamAV	Win.Packed.Filerepmalware-9864117-0
Kaspersky	Trojan.Win32.Agentb.kplt
BitDefender	Trojan.GenericKD.38054800
MicroWorld-eScan	Trojan.GenericKD.38054800
BitDefenderTheta	AI:Packer.3F6F594C1E
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
FireEye	Generic.mg.ed5e1cdece460619
Emsisoft	Trojan.GenericKD.38054800 (B)
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
GData	Trojan.GenericKD.38054800
AhnLab-V3	Trojan/Win.Generic.C4774822
McAfee	GenericRXAA-FA!ED5E1CDECE46
MAX	malware (ai score=84)
VBA32	BScope.Trojan.SelfDel
Rising	Trojan.Generic@ML.85 (RDML:X5S+NoZO+M9yN1BzgFWqhA)
Ikarus	Trojan.Win32.Crypt
AVG	Win32:TrojanX-gen [Trj]

How to remove Win32/Agent.ADRC?

Win32/Agent.ADRC removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X