| K7 Detection Name | Affected OS | Prevalence | AV Definition Version |
|---|---|---|---|
| Trojan ( 006dec4f1 ) | Windows | Low | 14.6.57025 |
| MD5 | 41ccb0056da45f446d6cfe5f3bbb4f44 |
| SHA256 | f5708c5b800ec1b66e396912f595f3545ea61612ee01f42127425730b9009f3a |
| File Size | 400,776 bytes |
| Packer Information | N/A |
| First Seen | 14-09-2025 |
| Last Seen | 14-10-2026 |
| Aliases | Agent.AGDX |
Behavior Details
1. Registry Keys Added/Modified:
Adds data
C:\ProgramData\DeviceDataBackup\Safely_Open_Your_USB_Files.exe CCleaner
under [Persistence / Auto-Run]
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run\SafelySoft
Removal Instructions
1. Update K7 security to the latest version.
2. Open Windows registry editor and delete the following keys:
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run
3. Restart the machine.