About “BAT/TrojanDropper.Agent.NCY” infection

The BAT/TrojanDropper.Agent.NCY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What BAT/TrojanDropper.Agent.NCY virus can do?

The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine BAT/TrojanDropper.Agent.NCY?


File Info:
crc32: 18C52B58
md5: 7349155c52ea4b55f8e3ee05ca06b280
name: 7349155C52EA4B55F8E3EE05CA06B280.mlw
sha1: 5913d9ec5b2890eea3c701ea8a297b2d19a2164f
sha256: 2c9a13de9bbc626a9bc1dcdb321354dcc205bd870159092d102aeae7b72fd448
sha512: df5ee198d007279fca0c1d87d25fab195a2ab524c773af09fbb6bd4dc396d129848a56725987c364ad8d18b2eb49cbd8988f4ac58be8b506d871f844a14ebe87
ssdeep: 3072:M/25jvDSgsqsb5Uh28vAbTV1WW69B9VjMdxPedN9ug0z9TBfFSr/6vRoVAoM9rrO:Ptzsb5Uh28+V1WW69B9VjMdxPedN9ugD
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
0: [No Data]

BAT/TrojanDropper.Agent.NCY also known as:

K7AntiVirus	Trojan ( 0052c0271 )
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.46112589
Cylance	Unsafe
Zillya	Trojan.Generic.Win32.922194
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Ransom:Win32/Generic.271e797b
K7GW	Trojan ( 0052c0271 )
Cybereason	malicious.c5b289
Symantec	Trojan.Gen.MBT
ESET-NOD32	BAT/TrojanDropper.Agent.NCY
APEX	Malicious
Avast	Win64:Trojan-gen
Kaspersky	Trojan-Ransom.Win32.Gen.aawd
BitDefender	Trojan.GenericKD.46112589
ViRobot	Trojan.Win32.Z.Phonzy.156160
MicroWorld-eScan	Trojan.GenericKD.46112589
Ad-Aware	Trojan.GenericKD.46112589
Sophos	Mal/Generic-S
McAfee-GW-Edition	BehavesLike.Win64.Ramnit.ch
FireEye	Generic.mg.7349155c52ea4b55
Emsisoft	Trojan.GenericKD.46112589 (B)
Microsoft	Trojan:Script/Phonzy.B!ml
Arcabit	Trojan.Generic.D2BF9F4D
AegisLab	Trojan.Win32.Cryrar.tqFl
GData	Trojan.GenericKD.46112589
TACHYON	Trojan/W64.Diztakun.156160
AhnLab-V3	Trojan/Win.Diztakun.R415890
McAfee	Artemis!7349155C52EA
MAX	malware (ai score=89)
Rising	Ransom.Gen!8.DE83 (CLOUD)
Fortinet	W32/Gen.AAWD!tr
AVG	Win64:Trojan-gen
Paloalto	generic.ml
Qihoo-360	Win64/Ransom.Generic.HgEASS4A

How to remove BAT/TrojanDropper.Agent.NCY?

BAT/TrojanDropper.Agent.NCY removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X