About “Trojan:Win32/Phorpiex.RC!MTB” infection

The Trojan:Win32/Phorpiex.RC!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Phorpiex.RC!MTB virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Trojan:Win32/Phorpiex.RC!MTB?


File Info:
name: EB7A719E113429185832.mlw
path: /opt/CAPEv2/storage/binaries/742ea9f6e421c1e09c800d4f8f4c5fef98240be1de1de0292f23c6acca669933
crc32: D9CFD386
md5: eb7a719e11342918583255cc5691bb79
sha1: eab49501090aa5f399da2932f2da04ee0e69b293
sha256: 742ea9f6e421c1e09c800d4f8f4c5fef98240be1de1de0292f23c6acca669933
sha512: 7607d2ccf4faf2317495c3490f4f6dc13be1de642c551850c810a0ef5235092ada0fe523d9128f4e7bc5994d756e57a5a7d167f3081eb04038d239023f845d02
ssdeep: 1536:HayEVHZTNasZ0UwYlLRvYo6TkN2qCk98yuRnHh3VrmB2zfJEzTDf8n:SNYIRvYbTk/C88PHh35mGJ0S
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B1A33A00F902C37EE4B641FA86F70AAD69389FA4134854C752C47DEE6B688DFB93511B
sha3_384: ecf5e5b3728b77e11d79f1f5bf1649fed87279e05fbefabda017ebd66fc66ad356b85c0f08836f0d3aaa2a8e63cd0e2f
ep_bytes: 558bec51e897170000ff15dc41db0050
timestamp: 2013-11-11 05:52:42

Version Info:
0: [No Data]

Trojan:Win32/Phorpiex.RC!MTB also known as:

Bkav	W32.AIDetect.malware2
MicroWorld-eScan	Trojan.GenericKDZ.88751
FireEye	Generic.mg.eb7a719e11342918
ALYac	Trojan.GenericKDZ.88751
Cylance	Unsafe
Zillya	Trojan.Agent.Win32.2816008
K7AntiVirus	Trojan ( 000c73e11 )
K7GW	Trojan ( 000c73e11 )
Cybereason	malicious.1090aa
Cyren	W32/Agent.EQM.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent.PTD
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	UDS:Trojan.Win32.Agent.gen
BitDefender	Trojan.GenericKDZ.88751
NANO-Antivirus	Trojan.Win32.Hvnc.jpnaoe
Avast	Win32:MalwareX-gen [Trj]
Ad-Aware	Trojan.GenericKDZ.88751
Sophos	Mal/Generic-S
F-Secure	Heuristic.HEUR/AGEN.1250886
VIPRE	Trojan.GenericKDZ.88751
McAfee-GW-Edition	BehavesLike.Win32.Backdoor.nh
Emsisoft	Trojan.GenericKDZ.88751 (B)
GData	Trojan.GenericKDZ.88751
Avira	HEUR/AGEN.1250886
Antiy-AVL	Trojan/Win32.Wacatac
Arcabit	Trojan.Generic.D15AAF
ZoneAlarm	UDS:Trojan.Win32.Agent.gen
Microsoft	Trojan:Win32/Phorpiex.RC!MTB
Google	Detected
AhnLab-V3	Trojan/Win.Generic.C5169754
Acronis	suspicious
McAfee	GenericRXTJ-GS!EB7A719E1134
MAX	malware (ai score=82)
VBA32	BScope.Trojan.Inject
Malwarebytes	Malware.AI.1165698015
Rising	Trojan.Agent!8.B1E (TFE:5:M3kvgKR4Vc)
Ikarus	Trojan-Ransom.Blocker
Fortinet	W32/Agent.PTD!tr
BitDefenderTheta	Gen:NN.ZexaF.34754.fqW@aOegm!c
AVG	Win32:MalwareX-gen [Trj]
Panda	Trj/GdSda.A

How to remove Trojan:Win32/Phorpiex.RC!MTB?

Trojan:Win32/Phorpiex.RC!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X