Trojan

How to remove “Trojan:Win32/Tarcloin.G”?

Malware Removal

The Trojan:Win32/Tarcloin.G is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Tarcloin.G virus can do?

  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Russian
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan:Win32/Tarcloin.G?


File Info:

crc32: BCD91127
md5: 1d23111d746f037d5d5b841b8be1637a
name: 1D23111D746F037D5D5B841B8BE1637A.mlw
sha1: 66989b929ec02f129427e42ae6a56827917e989c
sha256: 0042de2e3b985aa397814504ba20a1b1bb0e32481952a8be74360eb1e3622276
sha512: 387108620437ef1d4bc8834545c6e963f449b25514be7a406e462ac075c55dcf3ac3f381a415de229251adb67ea3f0810d8a879ef4a8f1554344b343934f29ce
ssdeep: 24576:b2O/GlzX8trHUIjTyAyPu/yHsr2ygq8sUGVrX7V:d9PjTou/os6y5UGxV
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan:Win32/Tarcloin.G also known as:

K7AntiVirusTrojan ( 004ec15b1 )
LionicTrojan.Win32.SCKeyLog.4!c
DrWebTrojan.BtcMine.123
ALYacGen:Variant.Zusy.388086
CylanceUnsafe
SangforTrojan.Win32.BitCoinMiner.DC
AlibabaTrojanSpy:Win32/SCKeyLog.b7baa6a2
K7GWTrojan ( 004ec15b1 )
Cybereasonmalicious.d746f0
SymantecTrojan.Gen
ESET-NOD32Win32/CoinMiner.EL
APEXMalicious
AvastWin32:BitCoinMiner-DC [Trj]
ClamAVWin.Trojan.Sckeylog-76
KasperskyTrojan-Spy.Win32.SCKeyLog.peg
BitDefenderGen:Variant.Zusy.388086
NANO-AntivirusTrojan.Win32.SCKeyLog.delnje
MicroWorld-eScanGen:Variant.Zusy.388086
TencentWin32.Trojan-spy.Sckeylog.Dyql
SophosMal/Generic-S
ComodoMalware@#1pjy944rfu5bm
BitDefenderThetaGen:NN.ZexaF.34266.4uZ@aC0S4kck
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Dropper.dc
FireEyeGen:Variant.Zusy.388086
EmsisoftGen:Variant.Zusy.388086 (B)
KingsoftWin32.Troj.SCKeyLog.p.(kcloud)
MicrosoftTrojan:Win32/Tarcloin.G
ArcabitTrojan.Zusy.D5EBF6
GDataGen:Variant.Zusy.388086
TACHYONTrojan-Spy/W32.SCKeyLog.922856
McAfeeArtemis!1D23111D746F
MAXmalware (ai score=100)
VBA32TrojanSpy.SCKeyLog
PandaTrj/CI.A
RisingTrojan.Generic@ML.89 (RDML:BasHa1PNkFTLe8jUUEbzQQ)
SentinelOneStatic AI – Malicious SFX
MaxSecureWin.MxResIcn.Heur.Gen
FortinetW32/Generic.AC.1F7A15!tr
AVGWin32:BitCoinMiner-DC [Trj]

How to remove Trojan:Win32/Tarcloin.G?

Trojan:Win32/Tarcloin.G removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment