Categories: Malware

BAT/Agent.NFE removal

The BAT/Agent.NFE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What BAT/Agent.NFE virus can do?

Creates RWX memory
Detected script timer window indicative of sleep style evasion
Reads data out of its own binary image
A process created a hidden window
Unconventionial language used in binary resources: Russian
A scripting utility was executed
Uses Windows utilities for basic functionality

How to determine BAT/Agent.NFE?


File Info:
crc32: 4B900AAFmd5: 2bfc62ddab60a782230282e81c6f1367name: 2BFC62DDAB60A782230282E81C6F1367.mlwsha1: c68a1fb28b135a8e01287e213fc6b7f498871e12sha256: 2070a5c462d34a02ace720fb23794481aa81dab7be08d67bae7feb910f953178sha512: f00e792c42b2c3bb519e1e755c99547d6363e1143bb45a5dc9ffe73ef2459318e374f6f0d586250944cf39c26fd1ca005e940ad0befc287e7cb7d9a6c872086fssdeep: 196608:q02G0+mrMPx304qZxsi0Q2vbn0BX48zKr+AnMjY:qh+qt4qbsZlbyzvvMtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

BAT/Agent.NFE also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 005119b81 )
Lionic	Trojan.Win32.Malicious.4!e
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop7.64394
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.30355946
Cylance	Unsafe
Alibaba	Worm:Win32/Diztakun.adfe7114
K7GW	Trojan ( 005119b81 )
Cybereason	malicious.dab60a
Symantec	Trojan.Gen.MBT
ESET-NOD32	BAT/Agent.NFE
APEX	Malicious
Avast	SFX:Agent-E [Trj]
ClamAV	Win.Trojan.Taskkill-2
Kaspersky	Trojan.Win32.Diztakun.bgog
BitDefender	Trojan.GenericKD.30355946
NANO-Antivirus	Trojan.Script.Agent.bowgyl
MicroWorld-eScan	Trojan.GenericKD.30355946
Tencent	Win32.Trojan.Diztakun.Hvts
Ad-Aware	Trojan.GenericKD.30355946
Sophos	Mal/Generic-S
Comodo	Malware@#1f48c3svpd997
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.wc
FireEye	Generic.mg.2bfc62ddab60a782
Emsisoft	Trojan.GenericKD.30355946 (B)
Avira	BAT/Agent.yfprr
Microsoft	Trojan:Win32/Skeeyah.A!rfn
GData	Trojan.GenericKD.30355946
McAfee	Artemis!2BFC62DDAB60
MAX	malware (ai score=84)
VBA32	Trojan.Diztakun
Malwarebytes	Malware.AI.1408148097
Panda	Trj/CI.A
Ikarus	Worm.BAT.Agent
Fortinet	BAT/Agent.NFE!worm
AVG	SFX:Agent-E [Trj]
Paloalto	generic.ml