Trojan

About “Trojan.Agent.BAVE (B)” infection

Malware Removal

The Trojan.Agent.BAVE (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.BAVE (B) virus can do?

  • Executable code extraction
  • Compression (or decompression)
  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Creates a slightly modified copy of itself
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Agent.BAVE (B)?


File Info:

crc32: 6AE16C52
md5: 8ee5a690e72072e709e7b6906825189d
name: 8EE5A690E72072E709E7B6906825189D.mlw
sha1: 21f07525c39e762b4dfdec73e8936750e851f169
sha256: 6b4e0bacccb182794d94fdf6fe5389046d10e1b31c1b7309c17c997e0265cd05
sha512: 2eea0c9a019ef1b7c02d33e40233dccb0cb09f84b36949b5c2cf761ac21e0f2f99b7b254bbfaf293556eff64078116695e3ddac281c29b6a6280dfb2b1f0c2da
ssdeep: 24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxF:dJ5gEKNikf3hBfUiWxF
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2010
InternalName: go.exe
FileVersion: 5.2.1.2
CompanyName: MSx420xab Corp
SpecialBuild:
LegalTrademarks: Legal
FileDescrsiption: gox421x2039.exe
Comments:
ProductName: Gox421x2030
ProductVersion: 5.2.1.3
PrivateBuild:
OriginalFilename: gog.exe
Translation: 0x0800 0x0026

Trojan.Agent.BAVE (B) also known as:

BkavW32.FamVT.GeND.Trojan
K7AntiVirusTrojan-Downloader ( 0040f6bd1 )
Elasticmalicious (high confidence)
DrWebTrojan.DownLoad3.28161
CynetMalicious (score: 100)
CAT-QuickHealTrojanDownloader.Upatre.A6
ALYacTrojan.Agent.BAVE
CylanceUnsafe
ZillyaTrojan.Generic.Win32.640589
SangforWin.Downloader.Upatre-5744087-0
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 004ebb4c1 )
Cybereasonmalicious.0e7207
BaiduWin32.Trojan.Kryptik.mp
CyrenW32/Trojan.HEYR-7073
SymantecSMG.Heur!gen
ESET-NOD32Win32/TrojanDownloader.Small.AAB
ZonerTrojan.Win32.19328
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
ClamAVWin.Downloader.Upatre-5744087-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Agent.BAVE
NANO-AntivirusTrojan.Win32.Bublik.cqkilw
MicroWorld-eScanTrojan.Agent.BAVE
TencentMalware.Win32.Gencirc.10b0799a
Ad-AwareTrojan.Agent.BAVE
SophosML/PE-A + Troj/Agent-AEUC
ComodoTrojWare.Win32.Kryptik.BOZ@546pmn
BitDefenderThetaGen:NN.ZexaF.34088.!y3@a41e4tb
VIPRETrojan.Win32.Zbot.o (v)
McAfee-GW-EditionBehavesLike.Win32.Cutwail.fh
FireEyeGeneric.mg.8ee5a690e72072e7
EmsisoftTrojan.Agent.BAVE (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan/Bublik.ggf
AviraTR/Yarwi.AD.5
eGambitRAT.Ammyy
Antiy-AVLTrojan/Generic.ASMalwS.5D7824
MicrosoftTrojan:Win32/Zbot.RT!MTB
GridinsoftTrojan.Win32.Agent.bot!s1
SUPERAntiSpywareTrojan.Agent/Gen-Dropper
GDataTrojan.Agent.BAVE
AhnLab-V3Trojan/Win32.Upatre.R267453
Acronissuspicious
McAfeeCutwail-FDGO!8EE5A690E720
MAXmalware (ai score=84)
VBA32Trojan.Download
MalwarebytesUpatre.Trojan.Downloader.DDS
PandaGeneric Malware
RisingDownloader.Waski!1.A489 (CLASSIC)
YandexTrojan.GenAsa!4FxEc4PI3eE
IkarusTrojan.Win32.Badur
MaxSecureWin.MxResIcn.Heur.Gen
FortinetW32/Small.AAB!tr.dldr
AVGWin32:TrojanX-gen [Trj]

How to remove Trojan.Agent.BAVE (B)?

Trojan.Agent.BAVE (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment