Trojan

Trojan.Agent.BKQM information

Malware Removal

The Trojan.Agent.BKQM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.BKQM virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection with CreateRemoteThread in a remote process
  • Creates RWX memory
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Code injection with CreateRemoteThread in a remote process
  • Deletes its original binary from disk
  • Sniffs keystrokes
  • Installs itself for autorun at Windows startup
  • Exhibits possible ransomware file modification behavior
  • Creates a hidden or system file
  • Creates a copy of itself
  • Creates known SpyNet mutexes and/or registry changes.
  • Anomalous binary characteristics

Related domains:

0kx.duckdns.org

How to determine Trojan.Agent.BKQM?


File Info:

crc32: E02BE53E
md5: dc91572204b5b5c90a9298c75b9b6525
name: back1.exe
sha1: 43aef29b533acc3debb5ca17761a02cb2e858c0b
sha256: 98f2d41d6da4384dcc9bc85a5730157942038e32068bdb7441fc28e4bb4161e2
sha512: 9e43b9951e4e454af873a1274d575c3f23215e7d3e31e23dee40726e32e6a891c349577748029e3c6bbf72b487ab2ba2607248ca60fad61e66bc11b7a87b0620
ssdeep: 6144:/xJsGLn4GoxDNT/xQphU+jrlgzfuzt91C9NDyWId98HhqbxtHGZI:pJsGMG4h/xQp6+tqOYy9zo03
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Agent.BKQM also known as:

MicroWorld-eScanTrojan.Agent.BKQM
CMCTrojan.Win32.Bublik!O
CAT-QuickHealWorm.Rebhip.A8
McAfeeGeneric PWS.di
CylanceUnsafe
VIPREWorm.Win32.Rebhip.A (v)
K7AntiVirusTrojan ( 004b89cf1 )
BitDefenderTrojan.Agent.BKQM
K7GWTrojan ( 004b89cf1 )
Cybereasonmalicious.204b5b
TrendMicroTSPY_SPATET.SMT
BaiduWin32.Trojan.Agent.co
F-ProtW32/Rebhip.A.gen!Eldorado
SymantecW32.Spyrat
TotalDefenseWin32/Spyrat!generic
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Trojan.Agent-36200
GDataTrojan.Agent.BKQM
KasperskyTrojan.Win32.Reconyc.fxmt
AlibabaWorm:Win32/Reconyc.1f5831f9
NANO-AntivirusTrojan.Win32.Bublik.dofkrs
ViRobotTrojan.Win32.U.Agent.289280
RisingWorm.Rebhip!1.A338 (CLASSIC)
Ad-AwareTrojan.Agent.BKQM
EmsisoftTrojan.Agent.BKQM (B)
ComodoTrojWare.Win32.PSW.Delf.~JHN@1l9grm
F-SecureBackdoor:W32/Spyrat.A
DrWebBackDoor.Cybergate.1
ZillyaTrojan.Llac.Win32.3683
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Android.dc
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.dc91572204b5b5c9
SophosW32/Rebhip-AR
SentinelOneDFI – Malicious PE
CyrenW32/Rebhip.A.gen!Eldorado
JiangminTrojan/Scar.lxo
WebrootWorm:Win32/Rebhip.A
AviraTR/Spy.Gen
Antiy-AVLTrojan/Win32.Bublik.vzq
Endgamemalicious (high confidence)
ArcabitTrojan.Agent.BKQM
SUPERAntiSpywareTrojan.Agent/Gen-Rebhip
ZoneAlarmTrojan.Win32.Reconyc.fxmt
MicrosoftTrojanSpy:Win32/Rebhip.A!upx
TACHYONTrojan/W32.DP-Scar.282112
AhnLab-V3Trojan/Win32.Llac.R1845
Acronissuspicious
VBA32Trojan.Bublik
ALYacTrojan.Agent.Reconyc.A
MAXmalware (ai score=100)
MalwarebytesBackdoor.SpyNet
PandaTrj/Ransom.AB
ZonerTrojan.Win32.60048
ESET-NOD32Win32/Spatet.I
TrendMicro-HouseCallTSPY_SPATET.SMT
TencentTrojan.Win32.Bublik.vzq
YandexWorm.DR.Rebhip.Gen
IkarusWorm.Win32.Rebhip
eGambitRAT.CyberGate
FortinetW32/Llac.GFU!tr
AVGWin32:AutoRun-CIN [Trj]
AvastWin32:AutoRun-CIN [Trj]
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Win32/Trojan.df4

How to remove Trojan.Agent.BKQM?

Trojan.Agent.BKQM removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment