Worm.Agent.STR removal tips

The Worm.Agent.STR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Worm.Agent.STR virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Worm.Agent.STR?


File Info:
name: A933CD6FC317C5D38F7B.mlw
path: /opt/CAPEv2/storage/binaries/2252f323d90493e24422a83380fbd4dd656323e8e8a0d35b3996f6d9492d8027
crc32: 31389718
md5: a933cd6fc317c5d38f7b869676f4170d
sha1: 2cd00a1fa7e6070688682b1db8771edd78c3e312
sha256: 2252f323d90493e24422a83380fbd4dd656323e8e8a0d35b3996f6d9492d8027
sha512: 6480fc50584f349c07e68ba4f01df8489f8033a0d1cdf1f31e8cbf729a80e2b0d0b7aba3e48fe14e1eaf31c98e361c5436b5958fc8e653b2f59fa4db9f8e9c43
ssdeep: 12288:1GVwce7zDVvkRRnBfcXPwE+s/pAQ7GJs3:QV
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13D45CF603FC4E896C6724A3404CDA68A22FFEE57A464C7DB3702B40F19B7B6544EAD53
sha3_384: 5efec79d8aee4ba79c507691e12efdb04e9635da202cedfda4365709e74d06a190a62dbd59fb49c2cc6437678ccac337
ep_bytes: 558bec6aff68f8234100687877400064
timestamp: 1970-01-15 21:13:04

Version Info:
CompanyName: 
FileDescription: Normal Directory MFC Application
FileVersion: 1, 0, 0, 1
InternalName: Normal Directory
LegalCopyright: Copyright (C) 2009
LegalTrademarks: 
OriginalFilename: Normal Directory.EXE
ProductName: Normal Directory Application
ProductVersion: 1, 0, 0, 1
Translation: 0x0409 0x04b0

Worm.Agent.STR also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Hlux.lJhd
tehtris	Generic.Malware
DrWeb	Win32.HLLW.Autoruner.18119
MicroWorld-eScan	Gen:Variant.Graftor.20238
FireEye	Generic.mg.a933cd6fc317c5d3
CAT-QuickHeal	Trojan.HesvRI.S19261757
ALYac	Gen:Variant.Graftor.20238
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 00010dd21 )
Alibaba	Worm:Win32/Folstart.fc80bc25
K7GW	Trojan ( 00010dd21 )
Cybereason	malicious.fc317c
BitDefenderTheta	Gen:NN.ZexaF.34698.jr0@aSQY!@aj
VirIT	Trojan.Win32.Generic.LOY
Cyren	W32/Agent.CAA.gen!Eldorado
Symantec	W32.Rotinom
Elastic	malicious (high confidence)
ESET-NOD32	Win32/Agent.NEC
APEX	Malicious
TrendMicro-HouseCall	Worm.Win32.FOLDRUN.SMA
Paloalto	generic.ml
ClamAV	Win.Malware.Aqnv-9917329-0
Kaspersky	HEUR:Trojan.Win32.Hesv.gen
BitDefender	Gen:Variant.Graftor.20238
NANO-Antivirus	Trojan.Win32.Cossta.ddawwa
Avast	Win32:Evo-gen [Trj]
Ad-Aware	Gen:Variant.Graftor.20238
Emsisoft	Gen:Variant.Graftor.20238 (B)
Comodo	Worm.Win32.Agent.NEC0@1lq821
Baidu	Win32.Worm.Agent.fc
VIPRE	Gen:Variant.Graftor.20238
TrendMicro	Worm.Win32.FOLDRUN.SMA
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-R + Mal/Behav-043
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Graftor.20238
Jiangmin	Trojan/Agent.ewlj
Google	Detected
Avira	WORM/Agent.fbrfn
Antiy-AVL	Trojan/Generic.ASMalwS.2D
Microsoft	Worm:Win32/Folstart.A
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win32.Agent.C4118987
VBA32	Trojan.Wacatac
MAX	malware (ai score=86)
Malwarebytes	Worm.Agent.STR
Tencent	Worm.Win32.AutoRun.h
Yandex	Trojan.GenAsa!yCCNvkncd1Y
TACHYON	Trojan/W32.Hesv.1208224
MaxSecure	Trojan.Malware.11832810.susgen
Fortinet	W32/Agent.NNJ!tr
AVG	Win32:Evo-gen [Trj]
Panda	W32/IRCBot.CKA.worm
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Worm.Agent.STR?

Worm.Agent.STR removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X