AIT:Trojan.GenericTKA.16 (file analysis)

The AIT:Trojan.GenericTKA.16 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What AIT:Trojan.GenericTKA.16 virus can do?

A process attempted to delay the analysis task.
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Looks up the external IP address
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
Creates a hidden or system file
Checks the CPU name from registry, possibly for anti-virtualization
Attempts to modify proxy settings
Attempts to disable UAC
Attempts to modify UAC prompt behavior

Related domains:

educationaltools.info

icanhazip.com

How to determine AIT:Trojan.GenericTKA.16?


File Info:
crc32: D6458493
md5: d4b4297b79f88c447c4d8c98631657ce
name: D4B4297B79F88C447C4D8C98631657CE.mlw
sha1: b29ee9f8cf1042f116cd27fcd9ed934f48783dea
sha256: 48352bad897e107167db0649f59d9a05bda70c36284d184d0e70cda1a40eed92
sha512: 88c655e1698b4b8f276800ad6c5a33e151e8589b44a265a13fef2c6b39c9dcbbe1e6a251ded3d07fc9eb6f582e381fb466dbb6b6f9fb7bb5bc5148282e265dbf
ssdeep: 24576:kq5TfcdHj4fmbvD/rQsRdHYY9oQWLOrQsRdHYY9ok2WBrQsRdHYY9okIWp:kUTsam3/UsbHTobLOUsbHTokhBUsbHT
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: xa9 2003 - 2015 Microsoft Corporation
FileVersion: 7.12.23.95
Comments: Skype
FileDescription: Skype Technologies S.A.
Translation: 0x0809 0x04b0

AIT:Trojan.GenericTKA.16 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.Occamy
ALYac	AIT:Trojan.Nymeria.402
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (D)
Baidu	Multi.Threats.InArchive
Cyren	W32/AutoIt.TA.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	multiple detections
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Autoit-6961072-0
Kaspersky	Trojan-Ransom.Win32.Blocker.lbmp
BitDefender	AIT:Trojan.GenericTKA.16
NANO-Antivirus	Trojan.Win32.AutoIt.fdquws
MicroWorld-eScan	AIT:Trojan.GenericTKA.16
Tencent	Malware.Win32.Gencirc.10b79e80
Ad-Aware	AIT:Trojan.GenericTKA.16
Sophos	Mal/Generic-S
Comodo	Malware@#1mwbasfhnkltu
BitDefenderTheta	AI:Packer.F0E60D5618
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0DDM21
McAfee-GW-Edition	BehavesLike.Win32.TrojanAitInject.tc
FireEye	Generic.mg.d4b4297b79f88c44
Emsisoft	AIT:Trojan.GenericTKA.16 (B)
Webroot	W32.Trojan.Gen
Avira	TR/Spy.Autoit.snanl
eGambit	Unsafe.AI_Score_97%
Microsoft	Trojan:Win32/Occamy.C
AegisLab	Trojan.Win32.Generic.4!c
GData	AIT:Trojan.Nymeria.402 (5x)
AhnLab-V3	Malware/Win32.Generic.C1253453
McAfee	Artemis!D4B4297B79F8
MAX	malware (ai score=98)
Malwarebytes	Malware.AI.1013873878
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0DDM21
Rising	Spyware.AutoLOG/Autoit!1.C9CE (CLASSIC)
Ikarus	Dropper.AutoIt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/AutoIt.CB!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove AIT:Trojan.GenericTKA.16?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

AIT:Trojan.GenericTKA.16 (file analysis)