Categories: Trojan

AIT:Trojan.Agent.DADA removal tips

The AIT:Trojan.Agent.DADA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What AIT:Trojan.Agent.DADA virus can do?

Injection (inter-process)
Injection (Process Hollowing)
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
Reads data out of its own binary image
Performs some HTTP requests
Executed a process and injected code into it, probably while unpacking
Contacts C&C server HTTP check-in (Banking Trojan)
Collects information to fingerprint the system
Anomalous binary characteristics

Related domains:

aksuperstore.com

How to determine AIT:Trojan.Agent.DADA?


File Info:
crc32: D5334613md5: 512ffcc41bb98d5b2b3ff3ba79c5fdbcname: 512FFCC41BB98D5B2B3FF3BA79C5FDBC.mlwsha1: a4327e458842da97941b25fc61e784c4c3089317sha256: 1dea18f05fc55172728aae8de85039391ca5e06cb9896e9f1ef725ef96ad60aasha512: 9728a197d117cb153471d7648bba49b39c22694ffec9055cc95ab7edd9769f9dddf51173fcd37646637b6fed38e5da6c403bf31dc389b26ad70d2b7b0de34003ssdeep: 49152:RJZoQrbTFZY1ia15YKuYGc/1nIxCcs9hTc2rSC4buoNRBf7BNBMZmSh:RtrbTA1Z5FuaI/8Br/Zoxf5Itype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1FileVersion: 3, 3, 8, 1FileDescription: Translation: 0x0809 0x04b0

AIT:Trojan.Agent.DADA also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0051ab071 )
Lionic	Trojan.Win32.Fareit.i!c
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Steam.13138
Cynet	Malicious (score: 100)
ALYac	AIT:Trojan.Agent.DADA
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_90% (D)
K7GW	Trojan ( 0051ab071 )
Cybereason	malicious.41bb98
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of Win32/Injector.Autoit.DCM
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Trojan.AZORult-6631818-0
Kaspersky	Trojan-PSW.Win32.Fareit.eaux
BitDefender	AIT:Trojan.Agent.DADA
NANO-Antivirus	Trojan.Win32.Fareit.fcfunm
MicroWorld-eScan	AIT:Trojan.Agent.DADA
Tencent	Win32.Trojan.Autoit.Auto
Ad-Aware	AIT:Trojan.Agent.DADA
Sophos	Mal/Generic-R + Mal/AutoIt-AI
Comodo	Malware@#2iipkoayhxyvm
BitDefenderTheta	AI:Packer.35F5D0CE15
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Agent.vc
FireEye	Generic.mg.512ffcc41bb98d5b
Emsisoft	AIT:Trojan.Agent.DADA (B)
Jiangmin	Trojan.PSW.Fareit.swm
Avira	DR/AutoIt.Gen2
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Occamy.C
GData	AIT:Trojan.Agent.DADA (2x)
TACHYON	Trojan-PWS/W32.Fareit.2424503
AhnLab-V3	Trojan/Win32.Nymeria.C2523137
McAfee	Artemis!512FFCC41BB9
MAX	malware (ai score=97)
VBA32	TrojanPSW.Fareit
Panda	Trj/CI.A
Ikarus	Trojan.Win32.Injector
MaxSecure	Trojan.Autoit.AZA
Fortinet	AutoIt/Injector.DCM!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml