Trojan.Win32.Agent.akmt

Posted: February 12, 2013

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Ranking:	19,400
Threat Level:	9/10
Infected PCs:	21,995

First Seen:	February 12, 2013
Last Seen:	February 12, 2025
OS(es) Affected:	Windows

Trojan.Win32.Agent.akmt is a Trojan that's associated with ransomware attacks from the Reveton family that currently are being spread through links on both Sourceforge.net and Github.com. These Reveton attacks make themselves known through fake legal alerts accusing the user of accessing illegal pornography – a scam that merges conveniently with the initial distribution tactics of Trojan.Win32.Agent.akmt, which uses links that are disguised as celebrity erotica. Links promoting Trojan.Win32.Agent.akmt are in the process of being removed from these sites, but until the danger has passed, you may need to avail yourself of anti-malware software and related PC security techniques to remove infections related to Trojan.Win32.Agent.akmt, which are capable of disabling most of the applications on your computer.

Trojan.Win32.Agent.akmt: From Offering Pornography to Threatening You Over It

SpywareRemove.com malware experts have noted Trojan.Win32.Agent.akmt attacks as long ago as 2008, but the most recent Trojan.Win32.Agent.akmt attacks originate from compromised Sourceforge and Github domains. Used for the explicit purpose of installing ransomware Trojans from the diverse and multinational Reveton group, these attacks can install Trojan.Win32.Agent.akmt via the Stamp EK Exploit Kit, which detects appropriate vulnerabilities as soon as an unprotected PC loads its web page. Disabling JavaScript, keeping your browser updated and having anti-malware security all can be appropriate defenses against this means of Trojan infection (and other exploit kit or drive-by-download-based attacks).

Links to Trojan.Win32.Agent.akmt-distributing sites usually are peddled as fake nude photographs for well-known television personalities such as news reporters or female wrestlers. The sites themselves have been known to be disguised as either fake YouTube pages or fake pornography sites (with what little visible content they have stolen from the real thing).

However, after Trojan.Win32.Agent.akmt and related PC threats are installed automatically, your PC will suffer from the usual symptoms of a ransomware attack: screen-wide pop-up warnings, legal threats related to your computer activities, requests to pay a fraudulent fine and difficulties in accessing other programs. The latter, in particular, should be highlighted as a security risk, and SpywareRemove.com malware experts also emphasize the lack of necessity in paying the fake legal fines that are demanded in pop-up attacks related to Trojan.Win32.Agent.akmt.

How to Put the Freeze on Trojan.Win32.Agent.akmt Without Emptying Your Wallet

As a consequence of the application-blocking attacks they're known to produce, Trojan.Win32.Agent.akmt and related PC threats must be disabled before they can be completely removed from your computer. SpywareRemove.com malware researchers also recommend that you update your anti-malware applications before deleting Trojan.Win32.Agent.akmt, which is likely to have undergone some significant updates during this latest series of attacks.

You can disable Trojan.Win32.Agent.akmt, along with any ransomware-related pop-ups, by rebooting Windows into Safe Mode or by launching a second operating system through a removable drive (your USB thumb drive or any similar device). If you follow this step and then use appropriate anti-malware tools to remove Trojan.Win32.Agent.akmt, you shouldn't need to perform any other actions to regain full access to your other programs, your web browser and any other features that may have been blocked during Trojan.Win32.Agent.akmt's attack.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

C:\Users\<username>\AppData\Local\Temp\tJvfXSjoynNh.exe

File name: tJvfXSjoynNh.exe
Size: 1.74 MB (1749504 bytes)
MD5: 37500ff6fc6c395916e1b7227b8791c8
Detection count: 9,148
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\Temp\tJvfXSjoynNh.exe
Group: Malware file
Last Updated: October 15, 2023

PluginFlashPlayer.exe

File name: PluginFlashPlayer.exe
Size: 413.69 KB (413696 bytes)
MD5: b313c94dd690670a0c51c8e6551764ff
Detection count: 51
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: May 21, 2015

file.exe

File name: file.exe
Size: 163.84 KB (163840 bytes)
MD5: 78e3bc3d643e7c96725673c541a06be8
Detection count: 17
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: February 14, 2013

More files