Malware

What is “Win32/Agent.UJM”?

Malware Removal

The Win32/Agent.UJM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Agent.UJM virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • At least one process apparently crashed during execution
  • A HTTP/S link was seen in a script or command line
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality

How to determine Win32/Agent.UJM?


File Info:

name: B7CA2C79C621FE272426.mlw
path: /opt/CAPEv2/storage/binaries/8e9a80ad58c0c3fe7395d659661eaebacd5fc873d25eaf6d77c956ba228a0833
crc32: C72B4122
md5: b7ca2c79c621fe272426f072201b5d2b
sha1: 1eb8a0dcca1ff73e6decaf179802448a426f7ba2
sha256: 8e9a80ad58c0c3fe7395d659661eaebacd5fc873d25eaf6d77c956ba228a0833
sha512: d053304320b674b686915a9531c4db28abfed95e41f39fd50e66790e936082924e9f148f33bf1d13c340678a075a907b34eafaec786a8a65f118cc6f99b7e48b
ssdeep: 24576:EQtip7Ze/MEnluxrM+wVJMywlBDatug1K:EYS7nEluRUA6
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1C0352B39EB0615F4D61367B6819EEB7B9B18BA198072EE7FFF4BC608B0330123845595
sha3_384: d0c91b22e3d067d83109cfaf4f1970bd93c7a828307c3ea1c0d600dc835b660cf8e89d37bb2d8b7141acfc763f3b742d
ep_bytes: 83ec1cc7042401000000ff1538c35000
timestamp: 2022-05-02 13:37:10

Version Info:

0: [No Data]

Win32/Agent.UJM also known as:

Elasticmalicious (moderate confidence)
ESET-NOD32a variant of Win32/Agent.UJM
APEXMalicious
BitDefenderGen:Heur.Mint.Titirez.cHW@pa3gRSm
MicroWorld-eScanGen:Heur.Mint.Titirez.cHW@pa3gRSm
Ad-AwareGen:Heur.Mint.Titirez.cHW@pa3gRSm
F-SecureHeuristic.HEUR/AGEN.1231816
FireEyeGen:Heur.Mint.Titirez.cHW@pa3gRSm
EmsisoftGen:Heur.Mint.Titirez.cHW@pa3gRSm (B)
GDataGen:Heur.Mint.Titirez.cHW@pa3gRSm
AviraHEUR/AGEN.1231816
ArcabitTrojan.Mint.Titirez.EC791A
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ALYacGen:Heur.Mint.Titirez.cHW@pa3gRSm
MAXmalware (ai score=88)
CylanceUnsafe
IkarusTrojan.Win32.Swrort
MaxSecureTrojan.Malware.300983.susgen

How to remove Win32/Agent.UJM?

Win32/Agent.UJM removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment