Troj/Agent-BFJF malicious file

The Troj/Agent-BFJF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Troj/Agent-BFJF virus can do?

Executable code extraction
Creates RWX memory
Attempts to connect to a dead IP:Port (7 unique times)
At least one IP Address, Domain, or File Name was found in a crypto call
Performs some HTTP requests
Attempts to create or modify system certificates

Related domains:

www.intel.com

support.apple.com

help.twitter.com

soldkorean.top

How to determine Troj/Agent-BFJF?


File Info:
crc32: 8742EA04
md5: 65735d7935049aeed3be123310ff5d2b
name: upload_file
sha1: a00cc4541801df21dba31cd672bcd89ee7a0cddb
sha256: fe6c0de1471535fb2fabb167f7dd8eceb587ee9fb1a873afea30453719c2b80f
sha512: 1d41870cfcabe90d46cab5467b19aa675234fdb22f92740a199a0a3fd6d9bec63322b7fc5fcb490cc18c88999e7f797108d45fd15ce41b11847e3097a10d9d10
ssdeep: 1536:+ZJbgyeb0OiyK8D9fe2/kyb7ZOu4bPW5mP5CEEDgeiGzKqfDcHdapbTIB+pY4kUJ:SJbgrjKIXZfaBbtYJfDc0IB+pYvkQWFJ
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Crowd Instrument race xa9 2014
InternalName: Ago care Ship wish
FileVersion: 2.0.2.661
CompanyName: Root ReceiveWinter
ProductName: Cry.dll
ProductVersion: 2.0.2.661
FileDescription: Crowd Instrument race
Translation: 0x0409 0x04b0

Troj/Agent-BFJF also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.43643802
FireEye	Trojan.GenericKD.43643802
McAfee	GenericRXLQ-RN!65735D793504
VIPRE	Trojan.Win32.Generic!BT
BitDefender	Trojan.GenericKD.43643802
Symantec	ML.Attribute.HighConfidence
Avast	Win32:Trojan-gen
Kaspersky	Trojan-Banker.Win32.Cridex.qkv
Alibaba	TrojanBanker:Win32/Cridex.82bb80dd
AegisLab	Trojan.Win32.Cridex.7!c
Rising	Trojan.GenKryptik!8.AA55 (CLOUD)
Ad-Aware	Trojan.GenericKD.43643802
Sophos	Troj/Agent-BFJF
F-Secure	Trojan.TR/AD.PhotoDlder.oaglp
DrWeb	Trojan.IcedID.30
TrendMicro	TROJ_GEN.R002C0DHC20
Fortinet	W32/GenKryptik.EQDN!tr
Emsisoft	Trojan.GenericKD.43643802 (B)
Ikarus	Trojan-Banker.IcedID
Cyren	W32/Trojan.JICN-4140
Avira	TR/AD.PhotoDlder.oaglp
MAX	malware (ai score=85)
Arcabit	Trojan.Generic.D299F39A
ZoneAlarm	Trojan-Banker.Win32.Cridex.qkv
Microsoft	Trojan:Win32/IcedId.DA!MTB
Cynet	Malicious (score: 85)
BitDefenderTheta	Gen:NN.ZedlaF.34152.ku9@ayZxzWii
ALYac	Trojan.IcedID.gen
Malwarebytes	Trojan.IcedID
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/GenKryptik.EQDN
TrendMicro-HouseCall	TROJ_GEN.R002C0DHC20
Tencent	Win32.Trojan-banker.Cridex.Wofz
GData	Trojan.GenericKD.43643802
AVG	Win32:Trojan-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.d75

How to remove Troj/Agent-BFJF?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Troj/Agent-BFJF malicious file