Sunday, January 29, 2012

Get rid of Heur.Agent/Gen-WhiteBox block its spying payload

Heur.Agent/Gen-WhiteBox is a new variant of Heur virus. Being true to its common family traits the current modification executes primarily spying payload. The goal of its activities is to derive sensitive information such as account names, passwords, credit card numbers from compromised PC.
The rogue can be observed in the wild under following filename: VKNT.exe. The executable has been observed in different locations, predominately randomly named files in Temporary folders and Windows directory. File size varies significantly with the smallest instance smaller up to 10 times than the biggest one observed in the wild.
Such trickery with variable file size is plain, but significantly aggravates removal of Heur.Agent/Gen-WhiteBox. Free scanner available here will remove Heur.Agent/Gen-WhiteBox in spite of its tricks as it is able to spot infections that apply various dodges to bewilder scanners and removers.

 Rename the remover to "explorer.exe" or try to install from Safe Mode if virus blocks download\installation

No comments: