Categories: Malware

Win32/Agent.NHD removal instruction

The Win32/Agent.NHD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Agent.NHD virus can do?

Sample contains Overlay data
Drops a binary and executes it
Authenticode signature is invalid
Creates a copy of itself
Anomalous binary characteristics

How to determine Win32/Agent.NHD?


File Info:
name: B2D5F68DBD48AD7FE1A0.mlwpath: /opt/CAPEv2/storage/binaries/c886d1bc2d684bf7412c5b41066908fad9bf5d9d37862b4575483dbc5a406566crc32: 01C494E9md5: b2d5f68dbd48ad7fe1a051579c365b16sha1: 20aef331259919e508935275fd628170c8802959sha256: c886d1bc2d684bf7412c5b41066908fad9bf5d9d37862b4575483dbc5a406566sha512: aa87f4fbfe860736ce4f40a9667c3ae1457d899c45842ddcd4996d76b8130c00ba6e160deb43461f228119b4586a9d91219c1610cf99e7a7c126660d13126487ssdeep: 3072:M+sEoOscy+upBSau5haEJt0JSHV/mR13bJqeLtZ2SHml+Oz:MxeyTpBpu5hHcJOWJFLtlH4type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1DBF3D107B9F2CC26D940457244F5CB7623BF7AA508D25A07FB906E6E3E363E19D35282sha3_384: 031e8e2bebdc03c3f7e689d5d5d759f70038460e08cfcc487b6746c5f55fb515755a6eeea66b3e19870eebd516c9df26ep_bytes: 558bec6aff685881400068303b400064timestamp: 2006-02-20 22:48:39
Version Info:
0: [No Data]

Win32/Agent.NHD also known as:

Bkav	W32.AIDetectMalware
Lionic	Worm.Win32.Agent.tnHx
DrWeb	Win32.HLLW.HellSpawn.1
ClamAV	Win.Malware.Hellspawn-9957597-0
Skyhigh	W32/Hellspawn.a
ALYac	Gen:Trojan.Malware.kqZ@aqa9Vkpi
Cylance	unsafe
Zillya	Worm.Agent.Win32.937
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 004e5efb1 )
BitDefender	Gen:Trojan.Malware.kqZ@aqa9Vkpi
K7GW	Trojan ( 004e5efb1 )
Cybereason	malicious.125991
Arcabit	Trojan.Malware.EB579A
BitDefenderTheta	AI:Packer.A46D6EAA1D
VirIT	Worm.Win32.Agent.VW
Symantec	W32.SillyFDC
Elastic	malicious (high confidence)
ESET-NOD32	Win32/Agent.NHD
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Worm.Win32.Agent.vw
Alibaba	Worm:Win32/Malex.23e67517
NANO-Antivirus	Trojan.Win32.HellSpawn.flexbo
ViRobot	Worm.Win32.Agent.53248
MicroWorld-eScan	Gen:Trojan.Malware.kqZ@aqa9Vkpi
Avast	Win32:WormX-gen [Wrm]
Rising	Worm.Agent!1.694B (CLASSIC)
Sophos	W32/Malex-J
F-Secure	Worm.WORM/Angelus.nxc
Baidu	Win32.Worm.Agent.gx
VIPRE	Gen:Trojan.Malware.kqZ@aqa9Vkpi
TrendMicro	WORM_HELLPWN.SMD
FireEye	Generic.mg.b2d5f68dbd48ad7f
Emsisoft	Gen:Trojan.Malware.kqZ@aqa9Vkpi (B)
Ikarus	Worm.Win32.Agent
Jiangmin	Trojan.Hesv.cai
Webroot	W32.Malware.Gen
Google	Detected
Avira	WORM/Angelus.nxc
MAX	malware (ai score=86)
Antiy-AVL	Worm/Win32.Agent
Kingsoft	malware.kb.a.999
Xcitium	TrojWare.Win32.Trojan.Agent.~HHP@1cn809
Microsoft	Trojan:Win32/Malex.gen!E
ZoneAlarm	Worm.Win32.Agent.vw
GData	Gen:Trojan.Malware.kqZ@aqa9Vkpi
Varist	W32/Heuristic-131!Eldorado
AhnLab-V3	Worm/Win32.RL_Agent.R305704
McAfee	W32/Hellspawn.a
VBA32	BScope.Trojan.Agent
Malwarebytes	Generic.Malware.AI.DDS
Panda	Generic Malware
TrendMicro-HouseCall	WORM_HELLPWN.SMD
Tencent	Malware.Win32.Gencirc.10b66474
Yandex	Trojan.GenAsa!4vDa0RqnQPo
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Hellspawn.NVW!tr
AVG	Win32:WormX-gen [Wrm]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)