Trojan

About “Trojan.Agent.BIDI” infection

Malware Removal

The Trojan.Agent.BIDI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.BIDI virus can do?

  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Network activity detected but not expressed in API logs

How to determine Trojan.Agent.BIDI?


File Info:

crc32: 70526AFC
md5: 9fd7e8903a375e8ad8a5f71469ab27bd
name: 03360B731D6710C7FDB7403ECA5B0408.mlw
sha1: 071495e9037c5f8bbb5d007a1658ab1c90e4caee
sha256: dd5a7973890fa5ec416440e7cdcc0677d87465017baaa3c72ac12f4193a80827
sha512: 643ddc429bc0f50e645264892bc621b3a4371c52700bd30c7a33e81b0deba5c349cfde6f6bac9cb171cefb4cae0cadf06482f63c90a8ff1263c2f931a3cb2997
ssdeep: 49152:YHGlRgcWU//Pc9T4Z1tF6vsOfvMJ7SMofWyinUX0QJM:YHWWU/Hc9sZ1tQvsOfvmuMIfhfJ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: x7248x6743x6240x6709 (C) 2004-2009
InternalName: RunGame_Program.exe
FileVersion: 9, 2, 0, 1125
ProductVersion: 9, 2, 0, 1125
FileDescription: RunGame_Program
OriginalFilename: RunGame_Program.exe
Translation: 0x0804 0x03a8

Trojan.Agent.BIDI also known as:

K7AntiVirusRiskware ( 004be0fa1 )
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
ALYacTrojan.Agent.BIDI
CylanceUnsafe
ZillyaTrojan.Agent2.Win32.25405
SangforTrojan.Win32.Generic.8
AlibabaRiskWare:Win32/ZhangGuoJian.5fe456bf
K7GWRiskware ( 004be0fa1 )
Cybereasonmalicious.03a375
CyrenW32/A-15bf0c81!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/RiskWare.ZhangGuoJian.A
APEXMalicious
AvastWin32:Agent-AVTX [Trj]
ClamAVWin.Trojan.Agent-592139
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Agent.BIDI
NANO-AntivirusTrojan.Win32.Agent.cxezbp
MicroWorld-eScanTrojan.Agent.BIDI
TencentWin32.Trojan.Agent.Hzdn
Ad-AwareTrojan.Agent.BIDI
SophosGeneric ML PUA (PUA)
BitDefenderThetaGen:NN.ZexaF.34170.Uv0@aa@GuOfj
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_AGENT_EC170007.UVPA
McAfee-GW-EditionBehavesLike.Win32.Dropper.th
FireEyeGeneric.mg.9fd7e8903a375e8a
EmsisoftTrojan.Agent.BIDI (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan/Generic.ayvbi
AviraHEUR/AGEN.1131242
Antiy-AVLTrojan/Generic.ASMalwS.2AD6E
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Agent.BIDI
GDataTrojan.Agent.BIDI
TACHYONTrojan/W32.Agent2.1802240
McAfeeGenericRXGB-VF!9FD7E8903A37
MAXmalware (ai score=100)
VBA32Trojan.Agent2
MalwarebytesRiskWare.GameHack
TrendMicro-HouseCallTROJ_AGENT_EC170007.UVPA
RisingTrojan.Generic@ML.100 (RDML:uPZWhLTrqUPyGHeDXDIzKA)
YandexTrojan.Agent2!m6P4Zp4baDQ
FortinetW32/Generic.AC.376E!tr
AVGWin32:Agent-AVTX [Trj]
Paloaltogeneric.ml

How to remove Trojan.Agent.BIDI?

Trojan.Agent.BIDI removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment