Trojan

What is “AIT:Trojan.GenericTKA.365”?

Malware Removal

The AIT:Trojan.GenericTKA.365 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What AIT:Trojan.GenericTKA.365 virus can do?

  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Uses Windows utilities for basic functionality
  • Creates a hidden or system file
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Attempts to disable UAC

Related domains:

eco3.madeforyourbody.com
aschi.org

How to determine AIT:Trojan.GenericTKA.365?


File Info:

crc32: 8687DE55
md5: 09c33075e1126f0c160c0aef33fca0f9
name: 09C33075E1126F0C160C0AEF33FCA0F9.mlw
sha1: db66cae46c76c81902d3688f097eaab17bdd78b5
sha256: bf2f5847f38dff4255ff4db4c946d5b45134a7507f4be432dcabd1795a1390e2
sha512: a12bc7b453bffe864ab6f83c955776be8e831b161a1daf6ae010f76193a05652ab91f5cb30db11fbdc87b678c04adc8240a68ace78ab9ee7dc28785729efa014
ssdeep: 6144:ruIlWqB+ihabs7Ch9KwyF5LeLodp2D1Mmakda0qL4+YBYHtbLw5xlZ:S6Wq4aaE6KwyF5L0Y2D1PqLYYHu3lZ
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

CompiledScript: AutoIt v3 Script: 3, 3, 8, 1
FileVersion: 3, 3, 8, 1
FileDescription:
Translation: 0x0809 0x04b0

AIT:Trojan.GenericTKA.365 also known as:

K7AntiVirusTrojan ( 700000111 )
DrWebTrojan.DownLoader10.27129
ClamAVWin.Malware.Llac-9827797-0
ALYacAIT:Trojan.GenericTKA.365
CylanceUnsafe
ZillyaTrojan.Blocker.Win32.41165
SangforTrojan.Win32.Agent.atACS
AlibabaTrojan:Win32/Blocker.b64f21a1
K7GWTrojan ( 700000111 )
Cybereasonmalicious.5e1126
ESET-NOD32multiple detections
APEXMalicious
AvastAutoIt:Banker-AV [Trj]
CynetMalicious (score: 99)
KasperskyTrojan-Ransom.Win32.Blocker.botb
BitDefenderAIT:Trojan.GenericTKA.365
NANO-AntivirusTrojan.Win32.Blocker.cbjfpk
MicroWorld-eScanAIT:Trojan.GenericTKA.365
TencentWin32.Trojan.Blocker.Hyx
Ad-AwareAIT:Trojan.GenericTKA.365
SophosTroj/Proxy-KU
ComodoMalware@#39xyx2sbhjbx2
BitDefenderThetaAI:Packer.D7CF028119
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_SPNR.11GJ13
FireEyeAIT:Trojan.GenericTKA.365
JiangminTrojan.Reconyc.bvn
AviraTR/Downloader.Gen
eGambitUnsafe.AI_Score_77%
ArcabitAIT:Trojan.GenericTKA.365
ZoneAlarmTrojan-Ransom.Win32.Blocker.botb
MicrosoftTrojanProxy:Win32/Banker.AZ
McAfeeArtemis!09C33075E112
MAXmalware (ai score=80)
MalwarebytesMalware.AI.2019083335
TrendMicro-HouseCallTROJ_SPNR.11GJ13
IkarusTrojan-PSW.Win32.Chisburg
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Blocker.BNGK!tr
AVGAutoIt:Banker-AV [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Blocker.HwsBynsA

How to remove AIT:Trojan.GenericTKA.365?

AIT:Trojan.GenericTKA.365 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment