Categories: Worm

Worm.Agent removal guide

The Worm.Agent is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Worm.Agent virus can do?

Executable code extraction
At least one process apparently crashed during execution
Creates RWX memory
A process attempted to delay the analysis task.
A process created a hidden window
Unconventionial language used in binary resources: Spanish (Modern)
Attempts to repeatedly call a single API many times in order to delay analysis time
Checks the system manufacturer, likely for anti-virtualization
Attempts to interact with an Alternate Data Stream (ADS)
Anomalous binary characteristics

Related domains:

www.bing.com

recontocont.hopto.org

How to determine Worm.Agent?


File Info:
crc32: 09FDB90Cmd5: 069e83d21f3f4fde5dbf80989a6a5941name: win_n92.exesha1: 4dbaf382b22545701300103e343bbf1da424a182sha256: 8d97b3d4248ac1d8b283f7be098ae1bb92c4d62e85ed1c5a81121d36810dff30sha512: 448f54fa705f930a353a8ff9738250f9fa0c57e8fadfa6e0a803458435112fc2c5c1d4d080a861f5bea738e7eb934780d8a03437263f0610a91fc7728e3a9ea4ssdeep: 1536:YJ8i4MfHIIK/PF3gXELwqqMupMPw1xbZtO8fDI:YQMfH3iPFwELwqqMupMPw17tO8fctype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0c0a 0x04b0ProductVersion: 1.00InternalName: win_n32FileVersion: 1.00OriginalFilename: win_n32.exeProductName: LastVersion86

Worm.Agent also known as:

MicroWorld-eScan	Gen:Variant.Razy.560312
FireEye	Generic.mg.069e83d21f3f4fde
CAT-QuickHeal	Trojan.GenericVMF.S10641492
McAfee	RDN/Generic.com
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	P2PWorm ( 0055c2e21 )
BitDefender	Gen:Variant.Razy.560312
K7GW	P2PWorm ( 0055c2e21 )
Cybereason	malicious.2b2254
TrendMicro	TROJ_GEN.R055C0PKS19
BitDefenderTheta	Gen:NN.ZevbaCO.34090.dm0@aaBIYRJ
Cyren	W32/Trojan.VUQM-7075
TrendMicro-HouseCall	TROJ_GEN.R055C0PKS19
Avast	Win32:Trojan-gen
Kaspersky	Trojan.Win32.Vilsel.dyuz
Alibaba	Trojan:Win32/Vilsel.a72be2c7
NANO-Antivirus	Trojan.Win32.VB.govges
AegisLab	Trojan.Win32.Generic.4!c
Rising	Trojan.Injector!1.B459 (CLASSIC)
Ad-Aware	Gen:Variant.Razy.560312
Sophos	Mal/Generic-S
Comodo	Malware@#15qqmhfr58bx8
F-Secure	Trojan.TR/VB.Agent.wpzxa
DrWeb	Trojan.Siggen8.64267
Zillya	Trojan.Vilsel.Win32.38474
McAfee-GW-Edition	RDN/Generic.com
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Razy.560312 (B)
APEX	Malicious
GData	Gen:Variant.Razy.560312
Jiangmin	Trojan.Vilsel.cde
MaxSecure	Trojan.Malware.7164915.susgen
Avira	TR/VB.Agent.wpzxa
Antiy-AVL	Trojan/Win32.VB
Microsoft	Trojan:Win32/Tiggre!rfn
Endgame	malicious (high confidence)
Arcabit	Trojan.Razy.D88CB8
ZoneAlarm	Trojan.Win32.Vilsel.dyuz
AhnLab-V3	Trojan/Win32.Vilsel.C3594734
VBA32	Trojan.Vilsel
ALYac	Gen:Variant.Razy.560312
MAX	malware (ai score=100)
Malwarebytes	Worm.Agent
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/VB.SZL
Tencent	Win32.Trojan.Vilsel.Fsg
Yandex	Trojan.Vilsel!F3VJjLnImf8
Ikarus	Trojan.Win32.VB
eGambit	Unsafe.AI_Score_83%
Fortinet	W32/VB.SZL!tr
Webroot	W32.Malware.Gen
AVG	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Win32/Trojan.f45