Trojan

How to remove “Trojan:Win32/BadEquation!rfn”?

Malware Removal

The Trojan:Win32/BadEquation!rfn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/BadEquation!rfn virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics
  • Unusual version info supplied for binary

Related domains:

z.whorecord.xyz

How to determine Trojan:Win32/BadEquation!rfn?


File Info:

crc32: 35FAD88A
md5: 2819f6987ca93f3061d6b3ba0003bdfd
name: vb.exe
sha1: efba0c82935331941fc7f7ef0cd950adeb3d15f6
sha256: 3a0965bd363e46e8c30590d7ddfd22bfc353728c6311c3ca61479da6f874bd5f
sha512: 7cee478967ecb1b4e974ae605f3ac9d6552c2fde7228b094f5da75b56722f686d8d64e29d032985856c4facf741dc770e3f4cf66be6fef9260c1864ef66f71dd
ssdeep: 24576:Yk70Trc1KqJaCDq502UHmyz1MOGLTJagpxY2qv3EMNEiz4F7:YkQTA9R2JmmXJJPc33NRz4F7
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Microsoft 2020
Assembly Version: 7.4.3.0
InternalName: vbc.exe
FileVersion: 7.4.3.0
CompanyName: Intel Graphics Modules Winword Intel Gaphics Monitor
LegalTrademarks: Trademark is Official Logo for the product
Comments: Intel Gaphics Adopter for updates
ProductName: Intel Graphics Installer
ProductVersion: 7.4.3.0
FileDescription: Data System Integration Modules
OriginalFilename: vbc.exe

Trojan:Win32/BadEquation!rfn also known as:

BkavW32.AIDetectVM.malware
DrWebTrojan.Packed2.42350
MicroWorld-eScanTrojan.GenericKD.33294857
FireEyeGeneric.mg.2819f6987ca93f30
Qihoo-360Generic/HEUR/QVM10.2.63E7.Malware.Gen
McAfeeArtemis!2819F6987CA9
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan ( 0055f4411 )
BitDefenderTrojan.GenericKD.33294857
K7GWTrojan ( 0055f4411 )
Cybereasonmalicious.293533
TrendMicroTROJ_FRS.0NA103BL20
BitDefenderThetaGen:NN.ZexaF.34104.jr0@aKICrCk
F-ProtW32/MSIL_Agent.BCX.gen!Eldorado
APEXMalicious
AvastWin32:Trojan-gen
GDataTrojan.GenericKD.33294857
KasperskyHEUR:Trojan.Win32.Generic
AlibabaTrojan:MSIL/Generic.709e21da
NANO-AntivirusTrojan.Win32.Mlw.hbeqai
AegisLabTrojan.Win32.FrauDrop.tpH3
RisingTrojan.Agent!8.B1E (CLOUD)
Ad-AwareTrojan.GenericKD.33294857
EmsisoftTrojan.GenericKD.33294857 (B)
F-SecureHeuristic.HEUR/AGEN.1030114
ZillyaTrojan.Generic.Win32.1036113
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
SophosMal/Generic-S
SentinelOneDFI – Malicious PE
CyrenW32/Trojan.NDVB-6001
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1030114
Antiy-AVLTrojan/Win32.Wacatac
Endgamemalicious (high confidence)
ArcabitTrojan.Generic.D1FC0A09
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftTrojan:Win32/BadEquation!rfn
TACHYONWorm/W32.Shakblades.1198592
Acronissuspicious
ALYacTrojan.Agent.Occamy.A
MAXmalware (ai score=99)
VBA32Trojan.Packed
MalwarebytesTrojan.MalPack
PandaTrj/CI.A
ESET-NOD32a variant of MSIL/Agent.CML
TrendMicro-HouseCallTROJ_FRS.0NA103BL20
TencentWin32.Trojan.Generic.Hpif
YandexTrojan.Agent!J1knY0F8/jQ
IkarusTrojan-Rat.Crimson
eGambitUnsafe.AI_Score_94%
FortinetW32/Generic.CML!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_90% (W)
MaxSecureTrojan.Malware.300983.susgen

How to remove Trojan:Win32/BadEquation!rfn?

Trojan:Win32/BadEquation!rfn removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment