Categories: Malware

Win32/Agent.ADYK removal instruction

The Win32/Agent.ADYK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Agent.ADYK virus can do?

Sample contains Overlay data
Drops a binary and executes it
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Creates a copy of itself
Deletes executed files from disk
Collects information to fingerprint the system
Uses suspicious command line tools or Windows utilities

How to determine Win32/Agent.ADYK?


File Info:
name: 7C6290E4EEBC8C46358C.mlwpath: /opt/CAPEv2/storage/binaries/101c137c1efa6cfe9e7a653a46e148abae36fb0a3960f95778f66e33d2d59b5fcrc32: AB9F4953md5: 7c6290e4eebc8c46358cda966b4cec8dsha1: 6be7836598b9ff36cede0f15efea93d69fbe8e6asha256: 101c137c1efa6cfe9e7a653a46e148abae36fb0a3960f95778f66e33d2d59b5fsha512: 363ba5c34fbecb627564182f6753ca16dc1029b884aa8df32797fc79fb7d7869d7e0ddb4aca52fb84feb504938c068e8114bdfacafa39a86a78be9f022d939c6ssdeep: 3072:ffDkoAhFYbuAeQnPZj9sfLr+mTt82Cv77d:fbkoAhFYbuAeyPGLr+m0vXdtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1B4F38D59F44046BAFA72407574EBF77A867EBE28172C0CE364A836469D316C227313DBsha3_384: 799ecbdca3174cab673081f2c069e2388c65d7cb5dafd3383fe33770fff9f4c7b09210af2fd5c0318aa711103ba95e27ep_bytes: c705b863410000000000c705d8634100timestamp: 2011-12-02 11:27:33
Version Info:
CompanyName: MTechFileDescription: Shell subsystemFileVersion: 2.1.1.4InternalName: shssys.exeLegalCopyright: Copyright (C) 2020OriginalFilename: shssys.exeProductName: Shell subsystemProductVersion: 2.1.1.4Translation: 0x0400 0x04b0

Win32/Agent.ADYK also known as:

Bkav	W32.AIDetect.malware2
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.62307830
Malwarebytes	Malware.AI.307741240
Sangfor	Trojan.Win32.Agent.V0ox
K7AntiVirus	Trojan ( 0058efeb1 )
Alibaba	Trojan:Win32/MalwareX.4b88eece
K7GW	Trojan ( 0058efeb1 )
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent.ADYK
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan-PSW.Win32.Coins.adii
BitDefender	Trojan.GenericKD.62307830
MicroWorld-eScan	Trojan.GenericKD.62307830
Avast	Win32:MalwareX-gen [Trj]
Tencent	Win32.Trojan-QQPass.QQRob.Gjgl
Ad-Aware	Trojan.GenericKD.62307830
Emsisoft	Trojan.GenericKD.62307830 (B)
VIPRE	Trojan.GenericKD.62307830
McAfee-GW-Edition	BehavesLike.Win32.Dropper.ct
Trapmine	suspicious.low.ml.score
FireEye	Generic.mg.7c6290e4eebc8c46
Sophos	Mal/Generic-S
GData	Trojan.GenericKD.62307830
Avira	TR/Crypt.XPACK.Gen2
Arcabit	Trojan.Generic.D3B6BDF6
ZoneAlarm	Trojan-PSW.Win32.Coins.adii
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Trojan/Win.Generic.C5235390
McAfee	Artemis!7C6290E4EEBC
MAX	malware (ai score=86)
TrendMicro-HouseCall	TROJ_GEN.R002H0AIP22
Rising	Trojan.Agent!8.B1E (TFE:3:lVmKEGZ4QoP)
Fortinet	W32/PossibleThreat
BitDefenderTheta	Gen:NN.ZexaF.34698.ku3@auL1g!ei
AVG	Win32:MalwareX-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)