In this article, I am going to detail the way the Btcon trojan infused into your PC, as well as how to get rid of Btcon trojan virus.
What is Btcon trojan?
| Name | Btcon |
| Infection Type | Trojan |
| Symptoms |
|
| Similar behavior | NullMixer, Gootkit, Chaos, Fackhacer, Azorult, Hor |
| Fix Tool |
See If Your System Has Been Affected by Btcon trojan |
The name of this type of malware is a reference to a widely known legend about Trojan Horse, that was operated by Greeks to get in the city of Troy and win the battle. Like a fake horse that was made for trojans as a present, Btcon trojan virus is dispersed like something legit, or, at least, useful. Harmful apps are stashing inside of the Btcon trojan virus, like Greeks inside of a huge wooden dummy of a horse.1Trojan viruses are among the leading malware types by its injection frequency for quite a very long time. And currently, throughout the pandemic, when malware got enormously active, trojan viruses increased their activity, too. You can see a number of messages on various sources, where users are whining concerning the Btcon trojan virus in their computers, and also requesting for aid with Btcon trojan virus elimination.
Trojan Btcon is a kind of virus that infiltrates into your system, and then executes various harmful functions. These features rely on a kind of Btcon trojan: it may work as a downloader for many other malware or as a launcher for another malicious program which is downloaded in addition to the Btcon trojan virus. Throughout the last 2 years, trojans are additionally delivered using email attachments, and in the majority of situations used for phishing or ransomware injection.
Btcon2 also known as
| Bkav | W32.AIDetect.malware1 |
| tehtris | Generic.Malware |
| MicroWorld-eScan | Gen:Variant.Fugrafa.258217 |
| FireEye | Generic.mg.0394cc2a9ab322d5 |
| ALYac | Gen:Variant.Fugrafa.258217 |
| Cylance | Unsafe |
| VIPRE | Gen:Variant.Fugrafa.258217 |
| Sangfor | Trojan.Win32.Save.a |
| K7AntiVirus | Trojan ( 0052964f1 ) |
| K7GW | Trojan ( 0052964f1 ) |
| Cybereason | malicious.ebe37a |
| BitDefenderTheta | Gen:NN.ZexaF.34754.@pW@a4U4rDoi |
| Symantec | ML.Attribute.HighConfidence |
| Elastic | malicious (high confidence) |
| ESET-NOD32 | a variant of Win32/Spy.Agent.PRG |
| APEX | Malicious |
| ClamAV | Win.Dropper.Tinba-9943147-2 |
| Kaspersky | HEUR:Trojan.Win32.Btcon.a |
| BitDefender | Gen:Variant.Fugrafa.258217 |
| NANO-Antivirus | Virus.Win32.Gen.ccmw |
| Avast | Win32:Trojan-gen |
| Ad-Aware | Gen:Variant.Fugrafa.258217 |
| Emsisoft | Gen:Variant.Fugrafa.258217 (B) |
| McAfee-GW-Edition | BehavesLike.Win32.VirRansom.rt |
| Trapmine | malicious.high.ml.score |
| Sophos | Generic ML PUA (PUA) |
| Ikarus | Worm.Win32.Vercuser |
| GData | Gen:Variant.Fugrafa.258217 |
| Detected | |
| Avira | HEUR/AGEN.1230730 |
| Antiy-AVL | Trojan/Generic.ASMalwS.5239 |
| Arcabit | Trojan.Fugrafa.D3F0A9 |
| Microsoft | Trojan:Win32/Sabsik.FL.B!ml |
| Cynet | Malicious (score: 100) |
| AhnLab-V3 | Trojan/Win.Generic.R496659 |
| Acronis | suspicious |
| McAfee | Artemis!0394CC2A9AB3 |
| MAX | malware (ai score=84) |
| VBA32 | BScope.Trojan.Convagent |
| Malwarebytes | Malware.Heuristic.1003 |
| Rising | [email protected] (RDML:9I5LEMbEUF75jbBYkAb2rA) |
| SentinelOne | Static AI – Malicious PE |
| AVG | Win32:Trojan-gen |
What are the symptoms of Btcon trojan?
- Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution;
- Yara rule detections observed from a process memory dump/dropped files/CAPE;
- Performs HTTP requests potentially not found in PCAP.;
- The binary contains an unknown PE section name indicative of packing;
- Executable file is packed/obfuscated with MPRESS;
- Authenticode signature is invalid;
- Uses Windows utilities for basic functionality;
- Uses Windows utilities for basic functionality;
- CAPE detected the CryptBot malware family;
- Checks the CPU name from registry, possibly for anti-virtualization;
- Attempts to modify proxy settings;
- Appears to use command line obfuscation;
- Harvests cookies for information gathering;
- Anomalous binary characteristics;
- Uses suspicious command line tools or Windows utilities;
The usual indicator of the Btcon trojan virus is a progressive entrance of different malware – adware, browser hijackers, et cetera. Because of the activity of these harmful programs, your system becomes very slow: malware absorbs big amounts of RAM and CPU capabilities.
One more detectable result of the Btcon trojan virus visibility is unknown processes showed in task manager. In some cases, these processes might try to imitate system processes, but you can understand that they are not legit by looking at the origin of these processes. Pseudo system applications and Btcon trojan’s processes are always detailed as a user’s tasks, not as a system’s.
How to remove Btcon trojan virus?
- Download and install Loaris Trojan Remover.
- Open Loaris and perform a “Standard scan“.
- “Move to quarantine” all items.
- Open “Tools” tab – Press “Reset Browser Settings“.
- Approve the reset pressing “Yes” button in the appeared window.
- Restart your computer.
To erase Btcon trojan and also be sure that all extra malware, downloaded with the help of this trojan, will be wiped out, as well, I’d advise you to use Loaris Trojan Remover.
Btcon trojan virus is quite hard to eliminate manually. Its pathways are pretty difficult to track, as well as the modifications executed by the Btcon trojan are concealed deeply within the system. So, the possibility that you will make your system 100% clean of trojans is pretty low. And don't forget about malware that has been downloaded and install with the help of the Btcon trojan virus. I believe these arguments suffice to assure that eliminating the trojan virus manually is a bad strategy.
Btcon removal guide
To detect and delete all malicious programs on your computer using Loaris Trojan Remover, it’s better to use Standard or Full scan. Removable scan, as well as Custom, will scan only specified folders, so such types of scans are not able to provide the full information.
You can spectate the detects during the scan process lasts. However, to perform any actions against spotted viruses, you need to wait until the scan is finished, or to stop the scanning process.
To choose the appropriate action for each detected viruses, choose the arrow in front of the detection name of detected malicious programs. By default, all malicious items will be moved to quarantine.
How to remove Btcon Trojan?
Name: Btcon
Description: Trojan Btcon is a kind of virus that infiltrates into your computer, and after that performs different destructive functions. These features depend upon a type of Btcon trojan: it can act as a downloader for many other malware or as a launcher for another destructive program which is downloaded in addition to the Btcon trojan. During the last two years, trojans are also dispersed via e-mail attachments, and most of situations utilized for phishing or ransomware infiltration.
Operating System: Windows
Application Category: Trojan
User Review
( votes)- What is Trojan Horse: https://en.wikipedia.org/wiki/Trojan_horse_(computing)
- Btcon VirusTotal Report: https://www.virustotal.com/api/v3/files/ac0c97d2321814c52571672d1479a3f23079794d20564c35040901a6ef8f7da2
