Trojan

Trojan.ScriptKD.7898 (B) malicious file

Malware Removal

The Trojan.ScriptKD.7898 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.ScriptKD.7898 (B) virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Authenticode signature is invalid

How to determine Trojan.ScriptKD.7898 (B)?


File Info:

name: 2E0B7EB451FEDC509429.mlw
path: /opt/CAPEv2/storage/binaries/e5c66abc42374eac400a9ed3f309875332f9b4d43017f1d6e6a6a9edab0433fc
crc32: D8959FFF
md5: 2e0b7eb451fedc5094294e9be90dc859
sha1: bbc7c739310e403eb98be2dc4221ab0f8db423b0
sha256: e5c66abc42374eac400a9ed3f309875332f9b4d43017f1d6e6a6a9edab0433fc
sha512: 5d94d049898686eb9235baf19fb927b8b8b1c54e15c438ec2207a151fde31e488b873dfea3ffc4d15cadcd6cabea144fdab5db47700a1fc72ce62ed33bf5f31e
ssdeep: 3072:jSSfG9wxyozSGV70jNukmjF5gKP+sMZIdulxEYSnypaQh1cos2a+jFf8/SkbcVm:eSUomEUi3+sMZ3xEYIrQNvFE/+s
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12E24BE2276D1C032E52324308DB99731B9B9B8355675994BBFC00E6E7F71AE2C326B53
sha3_384: e617e7b74c1995158fe44d09ce53944eb44c7d6459f4414fe1b2bd61a37c5e72af664398b7fe35d28cde37c687dead9b
ep_bytes: e85d640000e978feffff8bff558bec56
timestamp: 2014-06-10 17:11:07

Version Info:

0: [No Data]

Trojan.ScriptKD.7898 (B) also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanTrojan.ScriptKD.7898
FireEyeTrojan.ScriptKD.7898
McAfeeArtemis!2E0B7EB451FE
APEXMalicious
BitDefenderTrojan.ScriptKD.7898
NANO-AntivirusTrojan.Win32.Disfa.dtznyx
EmsisoftTrojan.ScriptKD.7898 (B)
VIPRETrojan.ScriptKD.7898
McAfee-GW-EditionBehavesLike.Win32.Infected.dh
GDataTrojan.ScriptKD.7898
XcitiumMalware@#1yvtxyxwqkqyi
MicrosoftPUA:Win32/Presenoker
ALYacTrojan.ScriptKD.7898
TrendMicro-HouseCallTROJ_GEN.R002H09EI23
IkarusTrojan.ScriptKD
MaxSecureTrojan.Malware.300983.susgen
DeepInstinctMALICIOUS

How to remove Trojan.ScriptKD.7898 (B)?

Trojan.ScriptKD.7898 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment