Categories: Worm

What is “Worm.Win32.Agent.acr”?

The Worm.Win32.Agent.acr is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Worm.Win32.Agent.acr virus can do?

Reads data out of its own binary image
Drops a binary and executes it
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Creates a copy of itself
Deletes executed files from disk
Anomalous binary characteristics

How to determine Worm.Win32.Agent.acr?


File Info:
name: 964CC30D140F89B5D1FF.mlwpath: /opt/CAPEv2/storage/binaries/4987f43d8f8116f2257b811adda4112ccb91843233b623ff7d518eda20c0320dcrc32: 5BD359DDmd5: 964cc30d140f89b5d1ff5a44d419c2dbsha1: 4238178d0619bfd91a99e124e57759690e585a9asha256: 4987f43d8f8116f2257b811adda4112ccb91843233b623ff7d518eda20c0320dsha512: 14a64c4d60d41daae1bcb72149942bb14935abe9dc1a3135c0952cfe0ea4a786e0ba3833e472469830754b7955c1ba03369df60cd47237cfde0086d646effe99ssdeep: 1536:9HSoNdVRsAXg993nNK6Y1Yu6BvVkdIIJxPoh:BSsdVRsAXg7M1Y3B6hohtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T12D442B21BA00E0ABD4C241F5EBA187BDA5241F31330655F7B3D2BCE5D2359E66A34B4Bsha3_384: b54d52eb9c20803a8c811d7c2ee188b7d83ba93f06caa35a4f8cda9183bd72953f099df30a0eecdf2ad30314f024c5e0ep_bytes: 558bec6aff6858334200687460400064timestamp: 2009-02-20 17:41:25
Version Info:
0: [No Data]

Worm.Win32.Agent.acr also known as:

Bkav	W32.AIDetectMalware
Lionic	Worm.Win32.Agent.tnMf
DrWeb	Worm.Siggen.5077
MicroWorld-eScan	Win32.Rivts.A
FireEye	Generic.mg.964cc30d140f89b5
ALYac	Win32.Rivts.A
Cylance	unsafe
Zillya	Worm.Agent.Win32.51649
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	EmailWorm ( 001c186c1 )
Alibaba	Worm:Win32/Sisproc.fc9
K7GW	EmailWorm ( 001c186c1 )
CrowdStrike	win/malicious_confidence_100% (D)
Arcabit	Win32.Rivts.A
BitDefenderTheta	AI:FileInfector.09C1E8730D
VirIT	Worm.Win32.Agent.ACR
Cyren	W32/ABRisk.AQQK-7366
Symantec	W32.Fujacks.CG
Elastic	malicious (high confidence)
ESET-NOD32	Win32/Agent.SYK
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Worm.Win32.Agent.acr
BitDefender	Win32.Rivts.A
NANO-Antivirus	Trojan.Win32.Agent.gxqqx
Avast	Win32:Evo-gen [Trj]
Tencent	Worm.Win32.Agent.acr
Emsisoft	Win32.Rivts.A (B)
F-Secure	Trojan.TR/Patched.Ren.Gen
Baidu	Win32.Trojan.Agent.aok
VIPRE	Win32.Rivts.A
TrendMicro	WORM_AGENT.SMIA
McAfee-GW-Edition	BehavesLike.Win32.Generic.dz
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Jiangmin	Worm/Agent.bsv
Google	Detected
Avira	TR/Patched.Ren.Gen
Antiy-AVL	Worm/Win32.Agent
Xcitium	Worm.Win32.Agent.~Acr@2nmdb2
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	Worm.Win32.Agent.acr
GData	Win32.Rivts.A
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Agent.C134041
McAfee	W32/Fujacks.bl
MAX	malware (ai score=82)
VBA32	Worm.Agent
Malwarebytes	Worm.Fujack
Panda	Trj/CI.A
Zoner	Trojan.Win32.36905
TrendMicro-HouseCall	WORM_AGENT.SMIA
Rising	Trojan.Agent!1.AD05 (CLASSIC)
Yandex	Worm.Agent!C78nwdofkDw
Ikarus	Virus.Win32.Resur
MaxSecure	Virus.W32.Agent.ACR
Fortinet	W32/BanLoader.AAAI!worm
AVG	Win32:Evo-gen [Trj]
Cybereason	malicious.d140f8
DeepInstinct	MALICIOUS