Malware

Should I remove “BAT/Agent.NAO”?

Malware Removal

The BAT/Agent.NAO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What BAT/Agent.NAO virus can do?

  • Reads data out of its own binary image
  • A process created a hidden window
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine BAT/Agent.NAO?


File Info:

crc32: 6B12A4F0
md5: 1f0b841ada298f84d634738116676af1
name: 1F0B841ADA298F84D634738116676AF1.mlw
sha1: 5293a2b5263be301888be37ae12655e4e4d458e8
sha256: 23696be8731c61822a6286f3e46ca722df252d5e9c0ac81fe6ce0ca0aeff25b5
sha512: 64f40952b26d16bfe492c44005b9fe7a0653ac8cea46724948f9961475e07b8a56a6e9579af679238567627e80e8d32bff839132687dbe8ffa835524688500f6
ssdeep: 768:d3M7YugZK4gl7SCpZWu3y5T/1MhMJqv8:dFZK4gl7SKZWCmTgMK
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

BAT/Agent.NAO also known as:

BkavW32.AIDetect.malware1
CynetMalicious (score: 100)
CylanceUnsafe
SangforTrojan.Win32.Delf.zdb
Cybereasonmalicious.5263be
SymantecML.Attribute.HighConfidence
ESET-NOD32BAT/Agent.NAO
APEXMalicious
AvastWin32:Malware-gen
NANO-AntivirusTrojan.Win32.Generic.fcqlef
SophosGeneric ML PUA (PUA)
ComodoTrojWare.Win32.Trojan.KillAV.~CS@gzoln
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.SuspiciousSpy.pm
FireEyeGeneric.mg.1f0b841ada298f84
SentinelOneStatic AI – Malicious PE
MicrosoftTrojan:Win32/Occamy.C23
AhnLab-V3Malware/Win32.Generic.C2564065
McAfeeArtemis!1F0B841ADA29
MAXmalware (ai score=94)
MalwarebytesMalware.AI.3906454177
IkarusTrojan.BAT.Agent
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove BAT/Agent.NAO?

BAT/Agent.NAO removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment