Categories: Trojan

Win32/TrojanDownloader.Agent.BICO removal instruction

The Win32/TrojanDownloader.Agent.BICO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanDownloader.Agent.BICO virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Attempts to modify proxy settings
Operates on local firewall’s policies and settings
Harvests cookies for information gathering
Collects information to fingerprint the system
Uses suspicious command line tools or Windows utilities

How to determine Win32/TrojanDownloader.Agent.BICO?


File Info:
name: 2DE65D97E6657BDFDB03.mlwpath: /opt/CAPEv2/storage/binaries/a26866821d2b212a59d01a063df7ae88182c4155bd0259889c96690ce1d1cfc3crc32: 9D2C0EF7md5: 2de65d97e6657bdfdb031b87f17bb41fsha1: 48727e4a2f2d7d57cd160833a59b0a777c640613sha256: a26866821d2b212a59d01a063df7ae88182c4155bd0259889c96690ce1d1cfc3sha512: ed5732798f9e0d90fefff0f6a462904ef8e761638808f1146db9a0e39553698f9e74b18307176a5f6c007935b186976e10a4136c85e48128d2d4f0c766d91546ssdeep: 1536:MjNtlPzxZvLUPFGyBoGHFmYa1VtDbJ1NUNDlvx1GWRw7k+lp:wllZvLQ5pYtDbJ1ovx17ww+/type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T115348307E685472AD0214F3089F75B57A76BEE52CE739B872278B3592EB33807C25709sha3_384: 6713afc6885383d8259f1da80b185c004ef7b802cd0b160b55ba30eba2a85e074c8aa87bd0949c9e76d1cd35543025d2ep_bytes: 558bec6aff6870614000688436400064timestamp: 2009-02-18 16:28:50
Version Info:
0: [No Data]

Win32/TrojanDownloader.Agent.BICO also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Agent.a!c
ALYac	Gen:Heur.Mint.Porcupine.oqX@aSxV1xpbg
VIPRE	Gen:Heur.Mint.Porcupine.oqX@aSxV1xpbg
K7AntiVirus	Trojan-Downloader ( 000798a01 )
BitDefender	Gen:Heur.Mint.Porcupine.oqX@aSxV1xpbg
K7GW	Trojan-Downloader ( 000798a01 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Mint.Porcupine.EDC675
BitDefenderTheta	AI:Packer.1632422120
VirIT	Trojan.Win32.Generic.XYD
Elastic	malicious (high confidence)
ESET-NOD32	Win32/TrojanDownloader.Agent.BICO
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Downloader.Win32.Agent.bico
Alibaba	TrojanDownloader:Win32/Porcupine.4ca0a526
NANO-Antivirus	Trojan.Win32.Agent.douioh
Rising	Trojan.DL.Win32.Mnless.che (CLASSIC)
Ad-Aware	Gen:Heur.Mint.Porcupine.oqX@aSxV1xpbg
Emsisoft	Gen:Heur.Mint.Porcupine.oqX@aSxV1xpbg (B)
Comodo	TrojWare.Win32.TrojanDownloader.Agent.~BZU@4tpfr
F-Secure	Trojan.TR/Spy.Gen
DrWeb	Trojan.Click.26544
Zillya	Downloader.Agent.Win32.163741
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-R + Mal/Emogen-Y
Ikarus	Trojan-Dropper.Agent
Avira	TR/Spy.Gen
MAX	malware (ai score=100)
Antiy-AVL	Trojan[Downloader]/Win32.Agent
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Heur.Mint.Porcupine.oqX@aSxV1xpbg
Google	Detected
AhnLab-V3	Trojan/Win32.Harnig.R11903
VBA32	BScope.Trojan.Staser
Panda	Trj/CI.A
Tencent	Win32.Trojan-Downloader.Agent.Eflw
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Agent.BICO!tr
AVG	Win32:Trojan-gen
Avast	Win32:Trojan-gen