Win32/Agent.ADSS removal tips

The Win32/Agent.ADSS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Agent.ADSS virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Attempts to connect to a dead IP:Port (1 unique times)
• Presents an Authenticode digital signature
• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• Authenticode signature is invalid

How to determine Win32/Agent.ADSS?

File Info:
name: 0633B2357D143763773A.mlw
path: /opt/CAPEv2/storage/binaries/65039cad3067540b2e0c950d3050f371267e0edc2e28d7f0fb4eb2e22d2c6b0d
crc32: B17E73E8
md5: 0633b2357d143763773ace9710f88feb
sha1: 464c8db0b1214eb97bf834b2288a1a5d9cd88413
sha256: 65039cad3067540b2e0c950d3050f371267e0edc2e28d7f0fb4eb2e22d2c6b0d
sha512: 646da632b767608268bc4d0421fd5256fc84e5e4f15e8b173029822696b437fd7958743d0b9a04040800576c4f259e1cd5be4b3d74c5834ae6337b8422ede7c9
ssdeep: 384:iPYrGverXCI87Mopo+mGRg5mYJLDCRbCh1IX1c:lGof8womDJLQbCgFc
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EB7217473A5734A3EA560F7090F7D6368F35B3702FD060DBA0B289B91D757A13E2950A
sha3_384: b3928c0703b4a1ab3528d4e1f0a0c14322d209b82ee01f4af1da2adfe249dcba7829cc85552667412835086112b11ea6
ep_bytes: e85d030000e9cdfdffff8bff558bec81
timestamp: 2021-12-05 03:09:59

Version Info:
CompanyName: TODO: 
FileDescription: TODO: 
FileVersion: 1.0.0.1
InternalName: Loder.exe
LegalCopyright: Copyright (C) 2021
OriginalFilename: Loder.exe
ProductName: TODO: 
ProductVersion: 1.0.0.1
Translation: 0x0804 0x04b0

Win32/Agent.ADSS also known as:

How to remove Win32/Agent.ADSS?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.