{"id":2202,"date":"2014-10-20T11:31:26","date_gmt":"2014-10-20T11:31:26","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=2202"},"modified":"2018-05-29T12:01:57","modified_gmt":"2018-05-29T12:01:57","slug":"remove-rcore-exe-trojan","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/remove-rcore-exe-trojan\/","title":{"rendered":"Remove RCore Trojan &#8211; RCore.exe Removal Instructions"},"content":{"rendered":"<p>Hello guys and gals. Just a quick post on the <strong>RCore<\/strong> <strong>trojan<\/strong>. If RCore is installed on your machine, you will see <strong>rcore.exe<\/strong> in in the Windows Task Manager and a new service called <strong>rcores<\/strong>\u00a0pointing to <strong>rcore.exe<\/strong>. I&#8217;ll show how to remove RCore in this blog post with the FreeFixer removal tool.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/rcore.exe-task-manager.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-2205\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/rcore.exe-task-manager.png\" alt=\"rcore.exe task manager\" width=\"668\" height=\"160\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/rcore.exe-task-manager.png 668w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/rcore.exe-task-manager-300x71.png 300w\" sizes=\"(max-width: 668px) 100vw, 668px\" \/><\/a><\/p>\n<p>RCore is distributed by a method called <strong>bundling<\/strong>. Bundling means that a piece of software is included in other software&#8217;s installers.<\/p>\n<p>When I find some new bundled software I always upload it to <a href=\"http:\/\/www.freefixer.com\/b\/scan-files-for-viruses-virustotal\/\">VirusTotal<\/a> to see if the anti-malware scanners there detect anything fishy. The detection rate is 14\/52. The RCore files are detected as <strong>Trojan.Win32.Generic.pak!cobra<\/strong> by AVware, <strong>a variant of Win32\/Agent.WGA<\/strong> by ESET-NOD32 and <strong>Artemis!0339F1025037<\/strong> by McAfee.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/rcore.exe-virustotal-report.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-2206\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/rcore.exe-virustotal-report.png\" alt=\"rcore.exe virustotal report\" width=\"808\" height=\"553\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/rcore.exe-virustotal-report.png 808w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/rcore.exe-virustotal-report-300x205.png 300w\" sizes=\"(max-width: 808px) 100vw, 808px\" \/><\/a><\/p>\n<p>You can remove RCore with the <a title=\"About the FreeFixer removal tool\" href=\"http:\/\/www.freefixer.com\/b\/about-freefixer\/\">FreeFixer<\/a> removal tool. Here&#8217;s a few screenshots from the removal that should help you: A restart of your computer may be required to complete the removal.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/rcore.exe-service.png\"><img loading=\"lazy\" class=\"alignnone wp-image-2204 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/rcore.exe-service.png\" alt=\"rcore.exe service named rcores\" width=\"750\" height=\"276\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/rcore.exe-service.png 750w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/rcore.exe-service-300x110.png 300w\" sizes=\"(max-width: 750px) 100vw, 750px\" \/><\/a> <a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/rcore.exe-remove.png\"><img loading=\"lazy\" class=\"alignnone wp-image-2203 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/rcore.exe-remove.png\" alt=\"Remove rcore.exe with FreeFixer\" width=\"366\" height=\"297\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/rcore.exe-remove.png 366w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/rcore.exe-remove-300x243.png 300w\" sizes=\"(max-width: 366px) 100vw, 366px\" \/><\/a><\/p>\n<p>Hope that helped you with the removal.<\/p>\n<p>Do you also have RCore on your computer? Any idea how it installed? Please let me and the readers know by posting a comments. Thanks!<\/p>\n<p>Thanks for reading. Welcome back!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hello guys and gals. Just a quick post on the RCore trojan. If RCore is installed on your machine, you will see rcore.exe in in the Windows Task Manager and a new service called rcores\u00a0pointing to rcore.exe. I&#8217;ll show how to remove RCore in this blog post with the FreeFixer removal tool. RCore is distributed &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/remove-rcore-exe-trojan\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Remove RCore Trojan &#8211; RCore.exe Removal Instructions<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[16,18],"tags":[],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/2202"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=2202"}],"version-history":[{"count":3,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/2202\/revisions"}],"predecessor-version":[{"id":2731,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/2202\/revisions\/2731"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=2202"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=2202"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=2202"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}