Malware

ML/PE-A + Troj/Agent-BGMW (file analysis)

Malware Removal

The ML/PE-A + Troj/Agent-BGMW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What ML/PE-A + Troj/Agent-BGMW virus can do?

  • The executable is compressed using UPX

How to determine ML/PE-A + Troj/Agent-BGMW?


File Info:

crc32: F69D89AF
md5: 7ae9f8e3e46785940f7cc84e6f5430ad
name: 7AE9F8E3E46785940F7CC84E6F5430AD.mlw
sha1: 8f5326075af338b3934e6cee1cc9c9c285e06344
sha256: 08dcdf1bb9fd8cb2478cd3a1ac5221bb47b3ebb0f1b35cacf1f6b2be4f879ee9
sha512: 009a09a30ab610e7e97998a005797eefd3564bec0a031f77d48bfb83acc400fd202e5207ef3f2742768550ab109f001900e32d932f112acefe79de0b5036fbd3
ssdeep: 12288:0qqV14uvb7CZGH3qFSpxt53E1pshT2hgC2qV14uvb7CZGH3qFSpxt53E1pshT2hP:0v1rjdEbOCb1rjdEbOC1b1rjdEbO5
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

0: [No Data]

ML/PE-A + Troj/Agent-BGMW also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 005415ef1 )
Elasticmalicious (high confidence)
DrWebTrojan.Click3.29339
CynetMalicious (score: 100)
ALYacGen:Variant.Zusy.367870
CylanceUnsafe
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 005415ef1 )
Cybereasonmalicious.3e4678
CyrenW32/Kryptik.DIU.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/TrojanDropper.Agent.SPH
APEXMalicious
AvastWin32:Trojan-gen
ClamAVWin.Malware.Fileinfector-9832954-0
KasperskyVirus.Win32.Lamer.ks
BitDefenderGen:Variant.Zusy.367870
NANO-AntivirusTrojan.Win32.Clicker.dapdse
MicroWorld-eScanGen:Variant.Zusy.367870
Ad-AwareGen:Variant.Zusy.367870
SophosML/PE-A + Troj/Agent-BGMW
ComodoPacked.Win32.MUPX.Gen@24tbus
BitDefenderThetaGen:NN.ZexaF.34236.3qZ@augH7dl
McAfee-GW-EditionBehavesLike.Win32.Generic.cm
FireEyeGeneric.mg.7ae9f8e3e4678594
EmsisoftGen:Variant.Zusy.367870 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan/Genome.cae
AviraHEUR/Patched.Ren
Antiy-AVLTrojan/Generic.ASMalwS.23431
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ZoneAlarmVirus.Win32.Lamer.ks
GDataGen:Variant.Zusy.367870
AhnLab-V3Malware/Gen.RL_Reputation.R365985
Acronissuspicious
McAfeeGenericRXNT-WU!7AE9F8E3E467
MAXmalware (ai score=87)
VBA32Trojan.Click
RisingTrojan.Kryptik!1.D30B (CLASSIC)
YandexTrojan.Zusy!LxdJjS0BRDs
IkarusTrojan.Win32.Genome
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/GenKryptik.CRKJ!tr
AVGWin32:Trojan-gen

How to remove ML/PE-A + Troj/Agent-BGMW?

ML/PE-A + Troj/Agent-BGMW removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment