Trojan

BAT/TrojanDownloader.wGet.EX removal instruction

Malware Removal

The BAT/TrojanDownloader.wGet.EX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What BAT/TrojanDownloader.wGet.EX virus can do?

  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine BAT/TrojanDownloader.wGet.EX?


File Info:

crc32: F5983AB6
md5: 3dbde2469826be0d106c292710f62501
name: 3DBDE2469826BE0D106C292710F62501.mlw
sha1: 8cae66f0fd473541aa809b1e20ce4dee2f57148a
sha256: 80494e279752d496f4f8a2f6b1059fd864d7bb2f1e1181edaa099b734cbcb3b6
sha512: e8cc42a4e57c5c15aa756569a5d54d93864145b057a4c001158dffcadf89a41e7c99e309fcccc3d40ec10d5b0f67fb8ad4af8c00390d39020b762cd42ca82533
ssdeep: 6144:Nu2urzh9xu/XkauiRGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG+GGGGGGGGGGGGGG1:Nutrzh9xOXkiRGGGGGGGGGGGGGGGGGG1
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

BAT/TrojanDownloader.wGet.EX also known as:

K7AntiVirusTrojan-Downloader ( 0053f3131 )
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop6.51731
CynetMalicious (score: 99)
CylanceUnsafe
K7GWTrojan-Downloader ( 0053f3131 )
Cybereasonmalicious.69826b
SymantecTrojan.Gen
ESET-NOD32BAT/TrojanDownloader.wGet.EX
APEXMalicious
AvastFileRepMalware
KasperskyWorm.BAT.Agent.du
BitDefenderTrojan.Rasftuby.Gen.8
NANO-AntivirusTrojan.Win32.SIHP0191.elnmur
MicroWorld-eScanTrojan.Rasftuby.Gen.8
TencentWin32.Trojan.Dropper.Lnyr
Ad-AwareTrojan.Rasftuby.Gen.8
SophosMal/Generic-S
ComodoTrojWare.BAT.TrojanDownloader.wGet.EX@8cquax
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Dropper.cc
FireEyeGeneric.mg.3dbde2469826be0d
EmsisoftTrojan.Rasftuby.Gen.8 (B)
WebrootW32.Trojan.Rasftuby.Gen
AviraTR/Dropper.Gen
KingsoftWin32.Troj.Rasftuby.8.(kcloud)
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataTrojan.Rasftuby.Gen.8
McAfeeArtemis!3DBDE2469826
MAXmalware (ai score=84)
PandaTrj/CI.A
FortinetBAT/WGet.EX!tr.dldr
AVGFileRepMalware
Paloaltogeneric.ml

How to remove BAT/TrojanDownloader.wGet.EX?

BAT/TrojanDownloader.wGet.EX removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment