Trojan.Agent.BDMB removal instruction

The Trojan.Agent.BDMB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Agent.BDMB virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Attempts to repeatedly call a single API many times in order to delay analysis time
Steals private information from local Internet browsers
Harvests information related to installed instant messenger clients
Harvests information related to installed mail clients
Collects information to fingerprint the system

Related domains:

z.whorecord.xyz

a.tomx.xyz

files.000webhost.com

How to determine Trojan.Agent.BDMB?


File Info:
crc32: 10C1DF68
md5: 6a63e0c292dd9b2e4f4162b551235069
name: setup.exe
sha1: 7fadd86ed7eccc090c9ffa0c8f9c7f1d02107f9e
sha256: e9ce2449c21b966f7e597e5debdbf4220593aa8b669b1f82a0b8001526d3394a
sha512: aaf79e3311099dd15faa5cc011d2483fa05bcff772536ef3104e79e8eb4be3188ce01a8ac4471b1cf6fa77087b3038f22b5b18735aa874c3410a3674b42e19f4
ssdeep: 12288:AzDTo+c8NlvH0tGJjeM5u8v+VmlE2GLJ0u27iB3kd3HlFCG9L:gxbP0tkaM5Rwm62000BUd3HDCGJ
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: xa9 Microsoft 2019
Assembly Version: 1.1.0.0
InternalName: Microsoft.exe
FileVersion: 1.1.0.0
CompanyName: Microsoft
LegalTrademarks: Microsoft
Comments: Microsoft
ProductName: Microsoft
ProductVersion: 1.1.0.0
FileDescription: Application
OriginalFilename: Microsoft.exe

Trojan.Agent.BDMB also known as:

MicroWorld-eScan	Trojan.Agent.BDMB
CAT-QuickHeal	Trojan.Dynamer
McAfee	Generic BackDoor.adv
Cylance	Unsafe
AegisLab	Trojan.Win32.Generic.lBRs
K7GW	Trojan ( 00503fce1 )
K7AntiVirus	Trojan ( 00503fce1 )
Invincea	heuristic
Baidu	MSIL.Trojan.Agent.bw
F-Prot	W32/Msil.O
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	MSIL/Spy.Agent.XB
ClamAV	Win.Trojan.Agent-1218694
Kaspersky	not-a-virus:PSWTool.Win32.MessengerPass.n
BitDefender	Trojan.Agent.BDMB
Avast	Win32:Malware-gen
Ad-Aware	Trojan.Agent.BDMB
Sophos	Mal/Behav-421
F-Secure	Packed:MSIL/SmartIL.A
DrWeb	Trojan.PWS.Stealer.13008
McAfee-GW-Edition	BehavesLike.Win32.Trojan.bc
Fortinet	MSIL/Agent.KBE!tr
Trapmine	malicious.high.ml.score
Emsisoft	Trojan.Agent.BDMB (B)
Ikarus	HackTool.Win32.BrowserPassview
Cyren	W32/Msil.AOXS-4373
Jiangmin	TrojanSpy.MSIL.ewm
Webroot	W32.Trojan.Gen
Avira	TR/Dropper.Gen
MAX	malware (ai score=80)
Antiy-AVL	Trojan[Spy]/MSIL.Agent
Endgame	malicious (high confidence)
Microsoft	Trojan:Win32/Tiggre!plock
ZoneAlarm	HEUR:Trojan.Win32.Generic
AhnLab-V3	Trojan/Win32.Agent.R114968
Acronis	suspicious
VBA32	TrojanSpy.MSIL.Agent
ALYac	Trojan.Agent.BDMB
Malwarebytes	Trojan.FakeMS.Gen
Arcabit	Trojan.Agent.BDMB
Yandex	Trojan.Recube.Gen.LL
SentinelOne	static engine – malicious
GData	Trojan.Agent.BDMB
AVG	Win32:Malware-gen
Cybereason	malicious.292dd9
CrowdStrike	malicious_confidence_100% (D)
Qihoo-360	HEUR/QVM03.0.22C9.Malware.Gen

How to remove Trojan.Agent.BDMB?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Agent.BDMB removal instruction