Trojan

Trojan.Agent.BNST removal instruction

Malware Removal

The Trojan.Agent.BNST is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.BNST virus can do?

  • Creates RWX memory
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Uses Windows utilities for basic functionality
  • Sniffs keystrokes
  • A process was set to shut the system down when terminated
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself
  • Anomalous binary characteristics

Related domains:

thedonfather.ddns.net

How to determine Trojan.Agent.BNST?


File Info:

crc32: 22F0288D
md5: 2e5781a32748e167f8abd547188f9db8
name: svchost.png
sha1: 8c01bc11bade02fe3b14b48c37e687e4b7765883
sha256: 3c2187ead5e32d48e6d575971a563a9b06295bbe8875292891fc52b866eac0dd
sha512: 23e828fd8cfeab833c83abcc0a30c63a185fc78be31364f35a2d9ee628288f855e9261450d5c2ea69dd3861212c9b32523dec66cfff518a320dd3c43098b5c30
ssdeep: 384:9MK6b2GZsx/Yr1+liORH1kcPFQ6Lg9gSOYRr9mRvR6JZlbw8hqIusZzZg2:eb9glF51LRpcnuU
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

0: [No Data]

Trojan.Agent.BNST also known as:

BkavW32.AtedypoLSTM.Trojan
MicroWorld-eScanTrojan.Agent.BNST
CMCBackdoor.MSIL.Agent!O
CAT-QuickHealBackdoor.Bladabindi.AL3
Qihoo-360Generic/Trojan.de7
McAfeeTrojan-FIGN
CylanceUnsafe
VIPREBackdoor.MSIL.Bladabindi.a (v)
SangforMalware
AlibabaBackdoor:MSIL/Bladabindi.1deed891
K7GWTrojan ( 700000121 )
K7AntiVirusTrojan ( 700000121 )
TrendMicroBKDR_BLADABI.SMC
BaiduMSIL.Backdoor.Bladabindi.a
F-ProtW32/MSIL_Bladabindi.AU.gen!Eldorado
SymantecBackdoor.Ratenjay
ESET-NOD32MSIL/Bladabindi.BH
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Trojan.B-468
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Agent.BNST
NANO-AntivirusTrojan.Win32.Bladabindi.eronkr
ViRobotBackdoor.Win32.Bladabindi.Gen.A
TencentWin32.Trojan.Generic.Htcp
Ad-AwareTrojan.Agent.BNST
EmsisoftTrojan.Agent.BNST (B)
ComodoBackdoor.MSIL.Bladabindi.A@566ygc
F-SecureTrojan.TR/Dropper.Gen7
DrWebTrojan.DownLoader11.18111
ZillyaBackdoor.Agent.Win32.55242
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Trojan.mm
FortinetMSIL/Agent.LI!tr
FireEyeGeneric.mg.2e5781a32748e167
SophosTroj/DotNet-P
IkarusTrojan.MSIL.Bladabindi
CyrenW32/MSIL_Bladabindi.AU.gen!Eldorado
JiangminTrojanDropper.Autoit.dce
WebrootW32.Malware.gen
AviraTR/Dropper.Gen7
MAXmalware (ai score=80)
Antiy-AVLTrojan[Backdoor]/MSIL.Bladabindi.as
Endgamemalicious (high confidence)
ArcabitTrojan.Agent.BNST
SUPERAntiSpywareTrojan.Agent/Gen-Bladabindi
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftBackdoor:MSIL/Bladabindi
AhnLab-V3Backdoor/Win32.Bladabindi.R91438
Acronissuspicious
VBA32Trojan.MSIL.Disfa
ALYacTrojan.Agent.BNST
MalwarebytesBackdoor.NJRat
PandaGeneric Malware
TrendMicro-HouseCallBKDR_BLADABI.SMC
RisingBackdoor.MSIL.Bladabindi!1.9E49 (CLOUD)
YandexTrojan.Agent!QN3turIgN/0
SentinelOneDFI – Malicious PE
eGambitUnsafe.AI_Score_100%
GDataMSIL.Backdoor.Bladabindi.AV
BitDefenderThetaGen:NN.ZemsilF.34122.bmW@a0Vm6zk
AVGMSIL:Agent-DRD [Trj]
Cybereasonmalicious.32748e
AvastMSIL:Agent-DRD [Trj]
MaxSecureTrojan.Malware.300983.susgen

How to remove Trojan.Agent.BNST?

Trojan.Agent.BNST removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment