About “Trojan.Agent.BRXQ (B)” infection

The Trojan.Agent.BRXQ (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Agent.BRXQ (B) virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan.Agent.BRXQ (B)?


File Info:
name: D9D5894F687EC36AF46B.mlw
path: /opt/CAPEv2/storage/binaries/2d733a507ee682031ec10ce4b1be31d86382ec9fdf52d83569f4ebe0c9bd5f54
crc32: BB875727
md5: d9d5894f687ec36af46b211af1cb14d0
sha1: 0b00014408c1f09443a55818ef8caf7627029e6b
sha256: 2d733a507ee682031ec10ce4b1be31d86382ec9fdf52d83569f4ebe0c9bd5f54
sha512: f5fc18cc2a308fb42422a3177f7358d0be5f85839684fb7a54ffce9fac1a2f40d0e58412bf51564d74b35079c8de2ba1b33cba02b4db9943b31fb91d4e1c0c93
ssdeep: 768:z2suTep11GU1a02yeWO/9GUiYcd1jMYbcTUQ7n6NfABhvuN:zDa0cFijclnaf1N
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10C13749797D2E0E9FC9C40B57253DDB548B164F72A8205624B12AD2C30303BDBB8ADDD
sha3_384: 2051578e580005236d75b2232ee1b669c519b6ea71584f724f1c5aec7ead46244b262757161d0626fd1ecbeaece3bc72
ep_bytes: 558bec6aff685087400068c277400064
timestamp: 1971-06-30 10:15:47

Version Info:
0: [No Data]

Trojan.Agent.BRXQ (B) also known as:

Bkav	W32.AIDetect.malware2
DrWeb	Trojan.DownLoader19.62131
MicroWorld-eScan	Trojan.Agent.BRXQ
FireEye	Generic.mg.d9d5894f687ec36a
CAT-QuickHeal	Ransom.Crowti.A6
McAfee	GenericR-GWP!D9D5894F687E
Cylance	Unsafe
K7AntiVirus	Trojan ( 004e0aaf1 )
K7GW	Trojan ( 004e0aaf1 )
Cybereason	malicious.f687ec
BitDefenderTheta	Gen:NN.ZexaF.34592.cqW@a0Ubc7l
Symantec	SMG.Heur!gen
Elastic	malicious (high confidence)
ClamAV	Win.Malware.AppWizard-9468381-1
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.Agent.BRXQ
NANO-Antivirus	Trojan.Win32.Mlw.irqrab
Avast	Win32:Evo-gen [Susp]
Tencent	Malware.Win32.Gencirc.10b3e62d
Ad-Aware	Trojan.Agent.BRXQ
Emsisoft	Trojan.Agent.BRXQ (B)
Comodo	TrojWare.Win32.Injector.DBR@6b3wqb
VIPRE	Trojan.Agent.BRXQ
McAfee-GW-Edition	GenericR-GWP!D9D5894F687E
Sophos	ML/PE-A + Troj/HkMain-CT
Ikarus	Trojan-Downloader.Win32.Bredolab
GData	Trojan.Agent.BRXQ
Jiangmin	Trojan.Inject.fte
Google	Detected
Avira	HEUR/AGEN.1237969
MAX	malware (ai score=89)
Antiy-AVL	Trojan/Generic.ASMalwS.77
Arcabit	Trojan.Agent.BRXQ
Microsoft	Trojan:Win32/Wacatac.B!ml
ALYac	Trojan.Agent.BRXQ
Malwarebytes	Trojan.Injector
Rising	Trojan.Generic@AI.86 (RDML:UP5756f+KU8i9OynXGY8aw)
Yandex	Trojan.Inject!uAfYkmQlDEw
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:Evo-gen [Susp]
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Trojan.Agent.BRXQ (B)?

Trojan.Agent.BRXQ (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X