Troj/Agent-BGQT malicious file

The Troj/Agent-BGQT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Troj/Agent-BGQT virus can do?

• Attempts to connect to a dead IP:Port (3 unique times)
• Starts servers listening on 127.0.0.1:30003
• HTTP traffic contains suspicious features which may be indicative of malware related traffic
• Performs some HTTP requests
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Attempts to modify proxy settings

Related domains:

How to determine Troj/Agent-BGQT?

File Info:
crc32: E7556DEB
md5: 57dea79add543c2be88e8c07d0aab200
name: 57DEA79ADD543C2BE88E8C07D0AAB200.mlw
sha1: 466371623fdc82f6b7bd770d6d817e047bf499d3
sha256: 0997f1240371da898e37d4a66c963ec24cb1ac08fa39ef431676a501dceba234
sha512: 1e1e63ef740a73c270bd04e91ba3502c2de9dc7e1cf57e2251c8b46612bbc3306745f32107083836b674592db46859a1f0b140c11d91ee6249ffeb4095c9bc10
ssdeep: 12288:We/0D3jvRUTDY0JQYnQ6lBar0+a9tQjClRgGaJklxuS9dpxOt0:We8D3jZUTDhQYndca9tQ+Xamlxuqd/
type: PE32 executable (console) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: (c) Microsoft Corporation. All rights reserved.
InternalName: winaudio.exe
FileVersion: 1.0.0.1
CompanyName: Microsoft Corporation
ProductName: winaudio.exe
ProductVersion: 1.0.0.1
FileDescription: winaudio.exe
OriginalFilename: winaudio.exe
Translation: 0x0409 0x04b0

Troj/Agent-BGQT also known as:

How to remove Troj/Agent-BGQT?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.