Categories: Trojan

Trojan:Win32/Agent.BM removal tips

The Trojan:Win32/Agent.BM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Agent.BM virus can do?

  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Creates a copy of itself
  • Deletes executed files from disk

How to determine Trojan:Win32/Agent.BM?


File Info:

name: 20DD293717A418A6FBCC.mlwpath: /opt/CAPEv2/storage/binaries/03da24588153527084d82bf92060c294a120cbe2ae9d8d3eb011e1c7f4e9bec6crc32: EC16E51Emd5: 20dd293717a418a6fbccc1783a234d6dsha1: 9eae25bec893c3398826e97c160a1d28b0d6a853sha256: 03da24588153527084d82bf92060c294a120cbe2ae9d8d3eb011e1c7f4e9bec6sha512: 9fda6db313dc3612701b114160f86728cc5e9e9ce2fcc43f3d96424b38d1d54fedd6a47b433c0fe8540a2c0376551975a37a488d425e039bda155487abd4834dssdeep: 1536:qChTmJ20iM6w2tDJzQSEcbgUbawr8kYD:4J2FJzAcE4awrMtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T116C36C23F6816477D0688EFA5C1DC1BAA27D77243C296146F5EBDF46ED7A3C10A1808Bsha3_384: f8af66055c2dc4f79a72ac185ab8786725bb4f55ef16f4c1e65279cbd29bc57dd6a8fe21a5772c9ce81bf6be043ad777ep_bytes: 558bec83c4f0b8f8464000e820f4fffftimestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Trojan:Win32/Agent.BM also known as:

Bkav W32.AIDetectMalware
Lionic Trojan.Win32.Refroso.lxTn
AVG Win32:Agent-ACTQ [Trj]
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Midie.112198
FireEye Generic.mg.20dd293717a418a6
CAT-QuickHeal Downloader.Agent.14007
Skyhigh BehavesLike.Win32.Eggnog.cm
McAfee Generic Dropper.jv
Cylance unsafe
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (W)
Alibaba TrojanDownloader:Win32/Dropr.7c552543
VirIT Trojan.Win32.Generic.ANVL
Symantec Trojan.Dropper
tehtris Generic.Malware
ESET-NOD32 a variant of Win32/Delf.UJM
Cynet Malicious (score: 100)
APEX Malicious
ClamAV Win.Trojan.Agent-35414
Kaspersky Trojan-Downloader.Win32.Agent.frus
BitDefender Gen:Variant.Midie.112198
NANO-Antivirus Trojan.Win32.Agent.ifswm
Avast Win32:Agent-ACTQ [Trj]
Tencent Malware.Win32.Gencirc.115d3ba3
Emsisoft Gen:Variant.Midie.112198 (B)
F-Secure Dropper.DR/Delphi.Gen
DrWeb Trojan.Dipen.16
Zillya Trojan.Delf.Win32.14482
TrendMicro TROJ_DROSTUH.SM
Trapmine malicious.high.ml.score
Sophos Mal/Generic-S
Ikarus BehavesLike
Jiangmin Trojan/Delf.jia
Varist W32/Trojan.MRQJ-9391
Avira DR/Delphi.Gen
Antiy-AVL Trojan[Downloader]/Win32.Agent.frus
Kingsoft malware.kb.a.1000
Microsoft Trojan:Win32/Agent.BM
Xcitium TrojWare.Win32.Trojan.Generic.19246220@2hdr3k
Arcabit Trojan.Midie.D1B646
ViRobot Dropper.Drostuh.120832
ZoneAlarm Trojan-Downloader.Win32.Agent.frus
GData Gen:Variant.Midie.112198
Google Detected
AhnLab-V3 Trojan/Win32.Delf.R16187
BitDefenderTheta AI:Packer.E097555C1E
ALYac Gen:Variant.Midie.112198
MAX malware (ai score=100)
VBA32 TrojanDropper.Drostuh
Malwarebytes Generic.Malware.AI.DDS
Panda Generic Malware
TrendMicro-HouseCall TROJ_DROSTUH.SM
Rising Trojan.Generic@AI.99 (RDML:CqDsgcnRbwdNehxjbRO/SA)
Yandex Trojan.GenAsa!CUp4IpAVRwc
SentinelOne Static AI – Malicious PE
MaxSecure Trojan.Malware.3752520.susgen
Fortinet W32/Agent.PEP!tr
Cybereason malicious.717a41
DeepInstinct MALICIOUS
alibabacloud Worm:Win/Delf.UJM

How to remove Trojan:Win32/Agent.BM?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

MSIL/GenKryptik.GXIZ information

The MSIL/GenKryptik.GXIZ is considered dangerous by lots of security experts. When this infection is active,…

2 months ago

Malware.AI.2789448175 (file analysis)

The Malware.AI.2789448175 is considered dangerous by lots of security experts. When this infection is active,…

2 months ago

Jalapeno.1878 removal instruction

The Jalapeno.1878 is considered dangerous by lots of security experts. When this infection is active,…

2 months ago

What is “Trojan.Heur3.LPT.YmKfaKBcBekib”?

The Trojan.Heur3.LPT.YmKfaKBcBekib is considered dangerous by lots of security experts. When this infection is active,…

2 months ago

How to remove “Worm.Win32.Vobfus.exmt”?

The Worm.Win32.Vobfus.exmt is considered dangerous by lots of security experts. When this infection is active,…

2 months ago

About “TrojanDownloader:Win32/Beebone.JO” infection

The TrojanDownloader:Win32/Beebone.JO is considered dangerous by lots of security experts. When this infection is active,…

2 months ago