How to remove “Trojan.Agent.GEME (B)”?

The Trojan.Agent.GEME (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Agent.GEME (B) virus can do?

Authenticode signature is invalid
CAPE detected the RedLine malware family
Anomalous binary characteristics
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Agent.GEME (B)?


File Info:
name: A0AA339FCA92E1C5273F.mlw
path: /opt/CAPEv2/storage/binaries/a4c03bbf3b26b309230b26a4675ff935bc66ab7d3acde72a6649d92325244865
crc32: 3D8208B7
md5: a0aa339fca92e1c5273f81513c640cd0
sha1: 50bd12c1783c5d44623609520300742b5c44e403
sha256: a4c03bbf3b26b309230b26a4675ff935bc66ab7d3acde72a6649d92325244865
sha512: 7ba4365a9bdd92de592b6dff55307be263eaa44f5c30fdc5e5801712e086454e5364f1342261e0b4a9c9d77aedaea77a438c0b878e646a97385566ced5e57c82
ssdeep: 3072:rzDKW1LgppLRHMY/TBfJvjcTp5XjYgafJl8/:rzDKW1Lgbdl/TBBvjc/kC
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AA548C217580C1B3C4B6153084E6CB759A7974320B7A96D7B7DC2BBA6E313E1A3362CD
sha3_384: 89177f810bc8521bb3cf96dba0d46940f4d86f1f29f6dbc0b89f2c6dff88d66bbef84b40afb9e08344ac2e4d7420ac61
ep_bytes: e8e15c0000e9a4feffff8bff558bec83
timestamp: 2012-07-13 22:47:16

Version Info:
Translation: 0x0000 0x04b0
Comments: Tools for control bio tech
CompanyName: BioTech
FileDescription: Recycle Bio Lab Tool
FileVersion: 3.2.1
InternalName: Reoffended.exe
LegalCopyright: BioTech Corp. 2022
OriginalFilename: Reoffended.exe
ProductName: 
ProductVersion: 3.2.1
Assembly Version: 32.23.2.0

Trojan.Agent.GEME (B) also known as:

tehtris	Generic.Malware
MicroWorld-eScan	Trojan.Agent.GEME
FireEye	Generic.mg.a0aa339fca92e1c5
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.1783c5
Cyren	W32/Trojan.DAN.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Trojan.Agent.GEME
Avast	Win32:Malware-gen
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	Artemis
Emsisoft	Trojan.Agent.GEME (B)
Ikarus	Trojan.MSIL.Spy
GData	Trojan.Agent.GEME
Antiy-AVL	Trojan/Win32.Sabsik
Arcabit	Trojan.Agent.GEME
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Google	Detected
AhnLab-V3	Trojan/Win.JB.R572463
McAfee	Artemis!A0AA339FCA92
MAX	malware (ai score=88)
Malwarebytes	Malware.AI.2151766112
Rising	Trojan.Generic@AI.100 (RDML:5jerSelevqNoC03n3SGNcw)
BitDefenderTheta	Gen:NN.ZexaF.36164.rq0@aK@Ejbi
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Trojan.Agent.GEME (B)?

Trojan.Agent.GEME (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X