Categories: Trojan

Should I remove “Trojan.Agent.BOBA”?

The Trojan.Agent.BOBA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Agent.BOBA virus can do?

Reads data out of its own binary image
Drops a binary and executes it
Authenticode signature is invalid
CAPE detected the NetWire malware family
Creates a copy of itself
Deletes executed files from disk
Anomalous binary characteristics
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Agent.BOBA?


File Info:
name: 8B4619872687D62F4E88.mlwpath: /opt/CAPEv2/storage/binaries/f220d4b5ec4a2f3a7136d6416c0f7aa96defcfb69b53d78768c8b6dd20cbf8a4crc32: D59CD0D2md5: 8b4619872687d62f4e88201b47e674f4sha1: 205d418565c92d7d72403fa07adfc854e6a41427sha256: f220d4b5ec4a2f3a7136d6416c0f7aa96defcfb69b53d78768c8b6dd20cbf8a4sha512: c53b1b413b34912319e595bfe2ad2f2d65c320be73e560f746d2a8944a019c336973548cce507ddb88b5abf0a31cdf5426429dcd84ddece5105a7323348ead3dssdeep: 1536:Jr/zIEc9uQ1q1vD9qrPP+r4MrdN/F+Xs6ibNqiRGWkxuABpWTF:Jr/zIEyQIrPP+r4MrdN/086ibgqGWkhetype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T18F83C719FA0BE0F2EE4E5D7162CBF6AF0B786920D864CE41DF840D43EA53D536219B94sha3_384: 44ba8e76e4ca6b704610832ce83c89e57b7d7acda77ebdfe6b610b59e2ec5e53d56afc1c4bbff7967818f7991c35e0d4ep_bytes: 55b83c100000575653e86c06010029c4timestamp: 2015-04-04 14:56:51
Version Info:
0: [No Data]

Trojan.Agent.BOBA also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.NetWiredRC.tnGH
MicroWorld-eScan	Trojan.Agent.BOBA
ClamAV	Win.Dropper.NetWire-9781821-0
FireEye	Generic.mg.8b4619872687d62f
CAT-QuickHeal	Backdoor.Netwiredrc.A4
ALYac	Trojan.Agent.BOBA
Malwarebytes	Weecnaw.Spyware.Stealer.DDS
Zillya	Trojan.Recam.Win32.191
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Spyware ( 0055e3db1 )
Alibaba	Backdoor:Win32/NetWiredRC.7ad5a5ed
K7GW	Spyware ( 0055e3db1 )
Cybereason	malicious.72687d
Arcabit	Trojan.Agent.BOBA
Baidu	Win32.Trojan-Spy.Weecnaw.a
VirIT	Trojan.Win32.Generic.DBV
Cyren	W32/Fsysna.C.gen!Eldorado
Symantec	SMG.Heur!gen
Elastic	Windows.Trojan.Netwire
ESET-NOD32	Win32/Spy.Weecnaw.A
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Backdoor.Win32.NetWiredRC.bfi
BitDefender	Trojan.Agent.BOBA
NANO-Antivirus	Trojan.Win32.Recam.dywvho
SUPERAntiSpyware	Backdoor.NetWired
Avast	Multi:Wirenet-B [Trj]
Tencent	Malware.Win32.Gencirc.10b0a14a
TACHYON	Trojan-Spy/W32.Recam.86016
Emsisoft	Trojan.Agent.BOBA (B)
F-Secure	Trojan.TR/Spy.Gen
DrWeb	BackDoor.Wirenet.96
VIPRE	Trojan.Agent.BOBA
TrendMicro	TrojanSpy.Win32.WEECNAW.SMUM
McAfee-GW-Edition	BehavesLike.Win32.Generic.mh
Trapmine	malicious.high.ml.score
Sophos	Troj/Netwire-AN
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanSpy.Recam.by
Webroot	Trojan.Dropper.Gen
Avira	TR/Spy.Gen
Antiy-AVL	Trojan[Spy]/Win32.Recam
Xcitium	Backdoor.Win32.NetWiredRC.AV@8bjx26
Microsoft	Backdoor:Win32/NetWiredRC.C
ViRobot	Trojan.Win32.Z.Netwiredrc.86016.A
ZoneAlarm	Backdoor.Win32.NetWiredRC.bfi
GData	Trojan.Agent.BOBA
Google	Detected
AhnLab-V3	Trojan/Win32.MDA.R149922
Acronis	suspicious
McAfee	Trojan-FISN!8B4619872687
MAX	malware (ai score=100)
VBA32	BScope.TrojanSpy.Loyeetro
Cylance	unsafe
Panda	Trj/CredentialsStealer.B
TrendMicro-HouseCall	TrojanSpy.Win32.WEECNAW.SMUM
Rising	Backdoor.NetWire!1.A18E (CLASSIC)
Yandex	Trojan.GenAsa!E9k0oOaJ9aU
Ikarus	Backdoor.Win32.NetWiredRC
MaxSecure	Trojan.Malware.8292391.susgen
Fortinet	W32/Inject.AVQ!tr
BitDefenderTheta	AI:Packer.7BBDDDB31E
AVG	Multi:Wirenet-B [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)