Categories: Malware

Troj/Agent-BAYG removal instruction

The Troj/Agent-BAYG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Troj/Agent-BAYG virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Troj/Agent-BAYG?


File Info:
name: 0C983C6AABB573469A6B.mlwpath: /opt/CAPEv2/storage/binaries/a7ef991b479b9001ed5f77f9b215b64c0eaaf21378e339243bc77766f2f7f5bfcrc32: 847B983Bmd5: 0c983c6aabb573469a6bbef2b9740c11sha1: a45082c15a66354595c5366073f4080735df0a28sha256: a7ef991b479b9001ed5f77f9b215b64c0eaaf21378e339243bc77766f2f7f5bfsha512: de1904653b52c23e07344643ff52f10edb44331460dd4bd3bdd469331e044c85e391d2f6c90e080d30a6fc6354d854dcbdb893286156d90b517556113b271f2essdeep: 3072:7CaoAs101Pol0xPTM7mRCAdJSSxPUkl3VEMQTCk/dN92sdNhavtrVdewnAx3wmVb:7qDAwl0xPTMiR9JSSxPUKgdodH6gktype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1A1D408137321CC51F1D097B6A2A5C374BAB09B5428F3C913FAECAD66BF706524E1E50Asha3_384: e156046deed293b90e839c51c14b54ac2373a8831d12dabb035c58b1d0acdcb8a3a123ed8b29b524d26bafa2be84d14fep_bytes: e85bc20300e8b0a9030033c0c3909090timestamp: 2015-01-28 13:36:24
Version Info:
0: [No Data]

Troj/Agent-BAYG also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Scar.tpzq
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKDZ.74320
FireEye	Trojan.GenericKDZ.74320
CAT-QuickHeal	Trojan.Mauvaise.SL1
McAfee	Trojan-FFZL!0C983C6AABB5
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Trojan.QQPass.Win32.24502
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Password-Stealer ( 004b75691 )
Alibaba	Trojan:Win32/QQPass.383
K7GW	Password-Stealer ( 004b75691 )
Cybereason	malicious.15a663
VirIT	Trojan.Win32.Generic.ATOF
Cyren	W32/S-cf9259cd!Eldorado
Symantec	SMG.Heur!gen
tehtris	Generic.Malware
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Scar.oetk
BitDefender	Trojan.GenericKDZ.74320
SUPERAntiSpyware	Trojan.Agent/Gen-QQPass
Avast	Win32:QQPass-WK [Trj]
Tencent	Trojan.Win32.Scar.16000124
Sophos	Troj/Agent-BAYG
Baidu	Win32.Trojan-PSW.QQPass.af
F-Secure	Trojan.TR/QQpass.ubzhp
DrWeb	Trojan.DownLoader12.31656
VIPRE	Trojan.GenericKDZ.74320
TrendMicro	TROJ_SCAR_GA250340.UVPA
McAfee-GW-Edition	BehavesLike.Win32.Generic.hh
Emsisoft	Trojan.GenericKDZ.74320 (B)
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.PSE.19CENXV
Jiangmin	Trojan/Generic.bbckw
Avira	TR/QQpass.ubzhp
Antiy-AVL	Virus/Win32.Expiro.imp
Xcitium	TrojWare.Win32.QQPass.OWD@6l9bso
Arcabit	Trojan.Generic.D12250
ZoneAlarm	Trojan.Win32.Scar.oetk
Microsoft	Trojan:Win32/QQPass
AhnLab-V3	Trojan/Win.Scar.R416160
Acronis	suspicious
ALYac	Trojan.GenericKDZ.74320
MAX	malware (ai score=80)
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_SCAR_GA250340.UVPA
Rising	Stealer.QQPass!1.A658 (CLASSIC)
Ikarus	Trojan.Vundo
MaxSecure	Trojan.Scar.OETK
Fortinet	W32/Scar.OETK!tr
AVG	Win32:QQPass-WK [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)