Categories: Malware

Win32:Agent-ANIM [Trj] removal tips

The Win32:Agent-ANIM [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32:Agent-ANIM [Trj] virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Win32:Agent-ANIM [Trj]?


File Info:
name: BC0B0D6F0C25B4A5DF0C.mlwpath: /opt/CAPEv2/storage/binaries/ebf8ab3b0416c5c029513e5661e99a77b0defac84b3fddc979dbc042ade5463acrc32: 82DA4C72md5: bc0b0d6f0c25b4a5df0ce3ad63159156sha1: 80e96318105f4cc65b2cd0053f32774b37ac6c79sha256: ebf8ab3b0416c5c029513e5661e99a77b0defac84b3fddc979dbc042ade5463asha512: 6b2047d35211a24a56f10c5bc0898a60f43f3e0cf70fb7ba42ce6191e857a0dc0cd197ad96299806ee3d2ae74cb0b33fa02f6185f28a5d119f9f602c53867a2essdeep: 1536:0NQD+SfHdmiO6TIjnM5Y1SFOCz1CgT5sszU8yX2QhkkZaL:eGf9dGjnMIsPz1/ysQxX26kIAtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T18B346A1373E2C8B6E17609314F6B5BB597B6FD308D359A1B23207B2E1D319428D2B762sha3_384: fe1c96b37de28d9db9dd31fc265b4b58fe6b6403d9e8bfd9ce3772b33b0e7d1e48fc04c98e7c4a8f12d6c2e92181d27aep_bytes: 8b8bd5c4410400509058e918420400e9timestamp: 2055-05-25 18:10:40
Version Info:
CompanyName: FileDescription: Normal Directory MFC ApplicationFileVersion: 1, 0, 0, 1InternalName: Normal DirectoryLegalCopyright: Copyright (C) 2009LegalTrademarks: OriginalFilename: Normal Directory.EXEProductName: Normal Directory ApplicationProductVersion: 1, 0, 0, 1Translation: 0x0409 0x04b0

Win32:Agent-ANIM [Trj] also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Agent.GEWD
FireEye	Generic.mg.bc0b0d6f0c25b4a5
CAT-QuickHeal	W32.Virut.D
ALYac	Trojan.Agent.GEWD
Cylance	unsafe
VIPRE	Trojan.Agent.GEWD
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 00345a5b1 )
K7GW	Trojan ( 00345a5b1 )
CrowdStrike	win/malicious_confidence_70% (D)
BitDefenderTheta	Gen:NN.ZexaF.36250.py0@a85pL4hj
VirIT	Win32.Cheburgen.A
Cyren	W32/Agent.CAA.gen!Eldorado
Symantec	W32.Rotinom
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Agent.NOM
APEX	Malicious
ClamAV	Win.Trojan.Virut-30
Kaspersky	HEUR:Worm.Win32.FolStart.pef
BitDefender	Trojan.Agent.GEWD
SUPERAntiSpyware	Trojan.Agent/Gen-Autorun
Avast	Win32:Agent-ANIM [Trj]
Tencent	Worm.Win32.AutoRun.h
TACHYON	Trojan/W32.Agent.249856.AQL
Emsisoft	Trojan.Agent.GEWD (B)
Baidu	Win32.Worm.Agent.fc
DrWeb	Win32.HLLW.Autoruner.18119
TrendMicro	Possible_Virut-2
Trapmine	malicious.high.ml.score
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Suspicious PE
GData	Win32.Trojan.PSE.14319PQ
Google	Detected
Antiy-AVL	Trojan/Win32.Agent
Xcitium	Worm.Win32.Agent.NEC0@1lq821
Arcabit	Trojan.Agent.GEWD
ZoneAlarm	HEUR:Worm.Win32.FolStart.pef
Microsoft	Trojan:Win32/Vindor!pz
Acronis	suspicious
MAX	malware (ai score=81)
VBA32	Trojan.Agent
Malwarebytes	Malware.AI.3578973977
Panda	Trj/Genetic.gen
Zoner	Trojan.Win32.36734
TrendMicro-HouseCall	Possible_Virut-2
Rising	Worm.Autorun!1.DD90 (CLASSIC)
Yandex	Trojan.GenAsa!yCCNvkncd1Y
Ikarus	Trojan.Win32.Agent
Fortinet	W32/Wacatac.B!tr
AVG	Win32:Agent-ANIM [Trj]
DeepInstinct	MALICIOUS