About “Trojan:Win32/Bicone!rfn” infection

The Trojan:Win32/Bicone!rfn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Bicone!rfn virus can do?

Anomalous binary characteristics

How to determine Trojan:Win32/Bicone!rfn?


File Info:
crc32: 55B44B17
md5: 1364f7de2321d2e8623eec2138cb9c22
name: 1364F7DE2321D2E8623EEC2138CB9C22.mlw
sha1: 2f6285d6ce620c13b584997fe6f0c1b1fef5eb9e
sha256: 1a0eb7ed99d5af10990ccb57900ffb1352649d01368f9eb93e2a8d65c819d372
sha512: b17cdb4094c3fc3cd52a44e62466509f024b2f09d76e138fa842ee7d3a2c633182d445cfc47b3fb9448af30902674764e31479986b710cd852bdf7080122c409
ssdeep: 49152:iAcGHC2ZUZ+umWeahNLJpVCs3T2ZQJ7Wgw37jtmrhDTtR5pr:iAqGwPNXT2W7g1+5X/r
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1
FileVersion: 3, 3, 8, 1
FileDescription: 
Translation: 0x0809 0x04b0

Trojan:Win32/Bicone!rfn also known as:

K7AntiVirus	Trojan ( 004935801 )
Lionic	Trojan.Win32.Autoit.lWc9
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop7.63527
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKDZ.57501
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Trojan:Win32/SelfDel.ffbebe50
K7GW	Trojan ( 004935801 )
Cybereason	malicious.e2321d
Baidu	AutoIt.Trojan.CoinMiner.a
Cyren	W64/BitCoin.I.gen!Eldorado
Symantec	Miner.Bitcoinminer
ESET-NOD32	multiple detections
APEX	Malicious
Avast	AutoIt:CoinMiner-B [Trj]
ClamAV	Win.Malware.Coinminer-6690085-0
Kaspersky	Trojan.Win32.Autoit.cbh
BitDefender	Trojan.GenericKDZ.57501
MicroWorld-eScan	Trojan.GenericKDZ.57501
Tencent	Win32.Trojan.Autoit.Dwjk
Ad-Aware	Trojan.GenericKDZ.57501
Sophos	ML/PE-A + Troj/AutMine-D
BitDefenderTheta	AI:Packer.526F724518
VIPRE	Trojan.Win32.CoinMiner.jra (v)
TrendMicro	TROJ_CONIME.XEV
McAfee-GW-Edition	BehavesLike.Win64.Trojan.vc
FireEye	Generic.mg.1364f7de2321d2e8
Emsisoft	Trojan.GenericKDZ.57501 (B)
Avira	TR/CoinMiner.JR.82
Microsoft	Trojan:Win32/Bicone!rfn
ZoneAlarm	Trojan.Win32.Autoit.cbh
GData	Trojan.GenericKDZ.57501
AhnLab-V3	Trojan/Win32.SelfDel.R230423
Acronis	suspicious
McAfee	Artemis!1364F7DE2321
MAX	malware (ai score=100)
VBA32	Trojan.Agent
Malwarebytes	Trojan.BitCoinMiner
TrendMicro-HouseCall	TROJ_CONIME.XEV
Rising	Trojan.CoinMiner!1.A36A (CLASSIC)
Yandex	Trojan.SelfDel!AoyoyxZuPns
Ikarus	Worm.Win32.AutoIt
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W64/CoinMiner.BOAV!tr
AVG	AutoIt:CoinMiner-B [Trj]
Paloalto	generic.ml

How to remove Trojan:Win32/Bicone!rfn?

Trojan:Win32/Bicone!rfn removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X