Trojan

Trojan-Dropper.RAR.Agent.bc removal guide

Malware Removal

The Trojan-Dropper.RAR.Agent.bc is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Dropper.RAR.Agent.bc virus can do?

  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Chinese (Traditional)
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz

How to determine Trojan-Dropper.RAR.Agent.bc?


File Info:

crc32: 6BB4699A
md5: e255f17acfd2614eabb8c4a3fe5cf64c
name: miner2.exe
sha1: 4a8c5e435bc8f3a681db46c6726915f6b46e65c9
sha256: da1d96855cd932ad684d3d7948527358b011f77ca9ce62b5c5b7d5f25960b6b0
sha512: f97fb77c4b4c4da62e60b7ea435bb5730f463878affec57af9df845f060c2545242aeb44057ba7b0c852befa1de5d96160efe2637bc27792481e2e1477a499bb
ssdeep: 24576:dt0FZYB4R27tiUlu89V1r2/5y8bAzLK2ePAojEffDtGWavrpj9J9VlHl:MY227E989V1r2z0ytIe4gt1l
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-Dropper.RAR.Agent.bc also known as:

BkavW32.MedusaKD.Trojan
DrWebTool.BtcMine.2227
MicroWorld-eScanTrojan.GenericKD.32811891
FireEyeTrojan.GenericKD.32811891
CAT-QuickHealTrojan.CoinMiner
McAfeeArtemis!E255F17ACFD2
MalwarebytesRiskWare.BitCoinMiner
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusAdware ( 005239ce1 )
BitDefenderTrojan.GenericKD.32811891
K7GWAdware ( 005239ce1 )
Invinceaheuristic
SymantecTrojan.Gen.NPE
APEXMalicious
AvastWin32:HarHarMiner-A [Trj]
ClamAVWin.Coinminer.Generic-7151250-0
GDataWin32.Trojan.Agent.S54RBB
KasperskyTrojan-Dropper.RAR.Agent.bc
AlibabaTrojanDropper:Win32/Agent.e4990177
NANO-AntivirusRiskware.Win32.BtcMine.gkmsen
ViRobotTrojan.Win32.Z.Coinminer.1323561
AegisLabTrojan.RAR.Agent.b!c
RisingPUF.CoinMiner!8.4639 (TFE:5:MR09nqgaYWC)
Ad-AwareTrojan.GenericKD.32811891
EmsisoftTrojan.GenericKD.32811891 (B)
TrendMicroTROJ_GEN.R002C0DKT19
McAfee-GW-EditionGenericRXIW-XN!845BA18AD445
SophosXMRig Miner (PUA)
IkarusPUA.CoinMiner
CyrenW32/Trojan.FEUP-8138
JiangminRiskTool.BitCoinMiner.mdk
Antiy-AVLTrojan/Win32.Miner
Endgamemalicious (high confidence)
ArcabitTrojan.Generic.D1F4AB73
SUPERAntiSpywareTrojan.Agent/Gen-Dropper
ZoneAlarmTrojan-Dropper.RAR.Agent.bc
MicrosoftTrojan:Win64/CoinMiner.WT
AhnLab-V3Unwanted/Win32.CoinMiner.C3608625
VBA32BScope.Trojan.Miner
ALYacTrojan.GenericKD.32811891
MAXmalware (ai score=99)
CylanceUnsafe
PandaTrj/CI.A
ESET-NOD32a variant of Win32/CoinMiner.ES potentially unwanted
TrendMicro-HouseCallTROJ_GEN.R002C0DKT19
MaxSecureTrojan.Malware.1728101.susgen
FortinetW32/CryptoMiner.L!tr
AVGWin32:HarHarMiner-A [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_60% (W)
Qihoo-360HEUR/QVM06.3.87A4.Malware.Gen

How to remove Trojan-Dropper.RAR.Agent.bc?

Trojan-Dropper.RAR.Agent.bc removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment