Categories: Trojan

Should I remove “BAT/TrojanDownloader.Agent.OEE”?

The BAT/TrojanDownloader.Agent.OEE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What BAT/TrojanDownloader.Agent.OEE virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
A process created a hidden window
Executed a very long command line or script command which may be indicative of chained commands or obfuscation
A scripting utility was executed
Uses Windows utilities for basic functionality
Stores JavaScript or a script command in the registry, likely for persistence or configuration
Collects information to fingerprint the system
Anomalous binary characteristics

How to determine BAT/TrojanDownloader.Agent.OEE?


File Info:
crc32: 41F415C7md5: c80a20c22822d611988caed00fee828cname: C80A20C22822D611988CAED00FEE828C.mlwsha1: ba37f1d2a5c888aa75abc2495d114ffb6eba8f2esha256: 47ba49ace38b677b82e264821274cfb0c531438b4449a2ee8a86f1488a0ec094sha512: 3908e57742d9d28fff3fb15081416b4eb2214a7053b7b1efca1b1a893ee27e487493a95702429e44db292ec92be930bb2c21f5c0e621d072e1ec83d7674f521cssdeep: 3072:0liUPXC8k1nJrX+fNTBfFHvtGT5fJF+Nn9aqsUzsM18o85wFjkT9mY:0zBkLL2NTBNPtGT5TC98MVFjfYtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

BAT/TrojanDownloader.Agent.OEE also known as:

Bkav	W32.AIDetect.malware1
MicroWorld-eScan	Trojan.GenericKD.35803007
FireEye	Generic.mg.c80a20c22822d611
CAT-QuickHeal	Trojan.CoinMinerPMF.S18560696
Qihoo-360	Win32/Trojan.Apost.HgIASOcA
McAfee	RDN/Generic.rp
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.35803007
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.22822d
Cyren	W32/Trojan.IUNU-0892
Symantec	Trojan.Gen.2
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.APosT.mkr
Alibaba	Trojan:Win32/APosT.90be0063
Ad-Aware	Trojan.GenericKD.35803007
Emsisoft	Trojan.GenericKD.35803007 (B)
Comodo	Malware@#8vlt458gy9nd
TrendMicro	TROJ_GEN.R03BC0PLP20
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
Sophos	Mal/Generic-R
Ikarus	Malware.Win32.Bucaspys
GData	Trojan.GenericKD.35803007
Jiangmin	Trojan.PowerShell.ev
Webroot	W32.Trojan.Gen
Antiy-AVL	Trojan/Win32.APosT
Kingsoft	Win32.Troj.Undef.(kcloud)
Gridinsoft	Trojan.Win32.CoinMiner.vb!s1
Arcabit	Trojan.Generic.D2224F7F
ZoneAlarm	Trojan.Win32.APosT.mkr
Microsoft	Trojan:Win32/Ymacco.AA47
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.C4276680
ALYac	Trojan.APosT.gen
MAX	malware (ai score=82)
VBA32	Trojan.APosT
Malwarebytes	Malware.Heuristic.1008
Panda	Trj/CI.A
Zoner	Trojan.Win32.73853
ESET-NOD32	BAT/TrojanDownloader.Agent.OEE
TrendMicro-HouseCall	TROJ_GEN.R03BC0PLP20
Rising	Downloader.Agent!8.B23 (CLOUD)
Yandex	Trojan.APosT!hJuGltjgzyA
eGambit	Unsafe.AI_Score_99%
Fortinet	Malicious_Behavior.SB
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_80% (W)
MaxSecure	Trojan.Malware.300983.susgen