Trojan

TrojanDownloader:Win32/Renos.KC removal instruction

Malware Removal

The TrojanDownloader:Win32/Renos.KC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What TrojanDownloader:Win32/Renos.KC virus can do?

  • Sample contains Overlay data
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine TrojanDownloader:Win32/Renos.KC?



File Info:

name: A1B3676CAEF04F1E6F6F.mlw
path: /opt/CAPEv2/storage/binaries/b1c490eeda3bf380615e9c95dc0b225b2efacb3805abc9e2df418649a72dd984
crc32: 5E617633
md5: a1b3676caef04f1e6f6f5dcc182f4c21
sha1: 008147fa7ca95f3302bff5a2189c24aac582258f
sha256: b1c490eeda3bf380615e9c95dc0b225b2efacb3805abc9e2df418649a72dd984
sha512: b574e13ff5171e44486e3be0de91d4af190b734f4d4368943bd3ed2803259f3fd057f71edd71800f7c5187ec58f9fb86dc5be986584880d294fd92cfd41c93d1
ssdeep: 6144:idsFsLB3GbOnTFPv5vWh2B2MMSMzvkVktn5MYPH2V1ZWlF:cLNNTVIsAPSMb04MMeqlF
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19354CF80FF61C4F6C2775538CA2EC2AADD043F6956F1986372C25DC735EA813C912A3A
sha3_384: 1f7714ac04368bfa86f2de5dc93593cd28a474befa023e8a24c9b06819d69b6d0a3a85746b9b5e0c41f044f61b24f919
ep_bytes: 6a746898204400e8dc02000033db895d
timestamp: 2003-03-10 00:32:23


Version Info:

CompanyName: CANON INC.
FileDescription: Canon Inkjet Printer Driver
FileVersion: 1.00.2.82 (vbl_wcp_d2_drivers.060831-0027)
InternalName: CNBO157.DLL
LegalCopyright: Copyright CANON INC. 2006 All Rights Reserved
OriginalFilename: CNBO157.DLL
ProductName: Canon Inkjet Printer Driver
ProductVersion: 1.00.2.82
Translation: 0x0409 0x04b0

TrojanDownloader:Win32/Renos.KC also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.lntx
MicroWorld-eScanGen:Variant.Zbot.34
ALYacGen:Variant.Zbot.34
Cylanceunsafe
ZillyaDownloader.Agent.Win32.87403
K7AntiVirusTrojan ( 0055dd191 )
AlibabaTrojan:Win32/Kryptik.b6221214
K7GWTrojan ( 0055dd191 )
Cybereasonmalicious.caef04
VirITTrojan.Win32.Generic.JAY
CyrenW32/S-ecdb94a3!Eldorado
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik.AJRO
APEXMalicious
ClamAVWin.Trojan.Pirminay-392
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Zbot.34
NANO-AntivirusTrojan.Win32.Crypted.culbfo
SUPERAntiSpywareTrojan.Agent/Gen-Renos
AvastWin32:Trojan-gen
TencentMalware.Win32.Gencirc.114ee922
EmsisoftGen:Variant.Zbot.34 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen3
DrWebTrojan.DownLoader4.48509
VIPREGen:Variant.Zbot.34
TrendMicroTROJ_DLOADR.SMWQ
McAfee-GW-EditionDownloader-CEW.ag
Trapminesuspicious.low.ml.score
FireEyeGeneric.mg.a1b3676caef04f1e
SophosTroj/Virtum-Gen
SentinelOneStatic AI – Suspicious PE
GDataGen:Variant.Zbot.34
JiangminTrojan/Pirminay.is
AviraTR/Crypt.XPACK.Gen3
MAXmalware (ai score=100)
Antiy-AVLTrojan/Win32.Unknown
XcitiumMalware@#32cox4fapp8ju
ArcabitTrojan.Zbot.34
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftTrojanDownloader:Win32/Renos.KC
CynetMalicious (score: 99)
AhnLab-V3Trojan/Win32.Pirminay.C32875
McAfeeDownloader-CEW.ag
VBA32SScope.Trojan.Pirminay.chc
MalwarebytesMachineLearning/Anomalous.95%
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_DLOADR.SMWQ
RisingDownloader.Renos!8.1D0 (TFE:5:zDcUnI8RQ1M)
YandexTrojan.Pirminay!Y/QETZYNb3k
IkarusTrojan.Win32.Pirminay
FortinetW32/Kryptik.ANL!tr
BitDefenderThetaAI:Packer.08A564FD1F
AVGWin32:Trojan-gen
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove TrojanDownloader:Win32/Renos.KC?

TrojanDownloader:Win32/Renos.KC removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment