Win64/Agent.ARD (file analysis)

The Win64/Agent.ARD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win64/Agent.ARD virus can do?

• Presents an Authenticode digital signature
• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary likely contains encrypted or compressed data.

How to determine Win64/Agent.ARD?

File Info:
crc32: 6EFAC414
md5: ddee86b84dcb72835b57b1d049e9e0cd
name: DDEE86B84DCB72835B57B1D049E9E0CD.mlw
sha1: 2b6907c7cefa8d41bd585e784619ba606f317c8e
sha256: fd765103cd948bd0099cc05782348f2b425441a87a7f38f1bfcdb185aecca84d
sha512: 72d9444e01db32f14a7c3c4851a9578ad29505354de1c5cb1084c63f069608a3f796a5d06e46510417d18f9c78b0d4c8096527f79fe0d0eab53b616ba1b84355
ssdeep: 49152:dYlwUpOqbxl08oPvzdx8s00Uxz1wAR5sps:dDLklEy0PARx
type: PE32+ executable (native) x86-64, for MS Windows

Version Info:
LegalCopyright: x798fx5efax5965x521bx4e92x5a31x79d1x6280x6709x9650x516cx53f8
InternalName: x4e3bx7a0bx5e8fx4fddx62a4
FileVersion: 1.0.1.3
CompanyName: x798fx5efax5965x521bx4e92x5a31x79d1x6280x6709x9650x516cx53f8
ProductName: x4e3bx7a0bx5e8fx4fddx62a4
ProductVersion: 1.0.1.3
FileDescription: x4e3bx7a0bx5e8fx4fddx62a4
OriginalFilename: MainProtect
Translation: 0x0804 0x04b0

Win64/Agent.ARD also known as:

How to remove Win64/Agent.ARD?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.