Malware

MemScan:Application.Downloader.AKR (file analysis)

Malware Removal

The MemScan:Application.Downloader.AKR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MemScan:Application.Downloader.AKR virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Queries information on disks, possibly for anti-virtualization
  • Detects the presence of Wine emulator via registry key

How to determine MemScan:Application.Downloader.AKR?


File Info:

crc32: 7F8DB62B
md5: f457c96464e3a5bf432de75f9878878c
name: F457C96464E3A5BF432DE75F9878878C.mlw
sha1: 87e1a7aa05988228934732ab7604a1c38355e907
sha256: 5a166dadcb8ae952bf17e551da711baa7a0ad792fc00fd3b09ce5647592cd0cc
sha512: d083d5676c23087b07272b7da86a30ef66a57f494dfba6bf60abd27a8ab20666d3b16c0be11cb2b7ec681d3588192f7f41e9d4a4f04fcf89bfaaa34247031ad6
ssdeep: 24576:LifVJ1icNOrqf2YRrDaX89zBSfBLlizDNWIHdSJtG2oCwlJk:MJAcOwwyRbJk
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

MemScan:Application.Downloader.AKR also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanMemScan:Application.Downloader.AKR
FireEyeGeneric.mg.f457c96464e3a5bf
McAfeeGenericRXBE-BH!F457C96464E3
CylanceUnsafe
VIPREAdware.Win32.ICLoader
SangforMalware
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderMemScan:Application.Downloader.AKR
K7GWAdware ( 00508eab1 )
K7AntiVirusAdware ( 00508eab1 )
CyrenW32/FusionCoreDownldr.A.gen!Eldorado
SymantecPUA.ICLoader
APEXMalicious
AvastWin32:DangerousSig [Trj]
Kasperskynot-a-virus:HEUR:AdWare.Win32.ICLoader.gen
AlibabaMalware:Win32/km_24541.None
NANO-AntivirusTrojan.Win32.GenKryptik.enhohx
RisingTrojan.Kryptik!1.A9C6 (CLOUD)
Ad-AwareMemScan:Application.Downloader.AKR
SophosGeneric PUA IH (PUA)
ComodoTrojWare.Win32.Crypt.B@7o6bny
F-SecureAdware.ADWARE/ICLoader.Gen7
DrWebTrojan.InstallCube.2309
ZillyaTrojan.KryptikCRTD.Win32.11405
TrendMicroTROJ_GEN.R002C0PAH21
McAfee-GW-EditionBehavesLike.Win32.Generic.th
EmsisoftApplication.InstallDeal (A)
IkarusPUA.ICLoader
JiangminAdWare.Generic.fhxa
AviraADWARE/ICLoader.Gen7
Antiy-AVLTrojan/Win32.TSGeneric
MicrosoftSoftwareBundler:Win32/ICLoader
ArcabitApplication.Downloader.AKR
SUPERAntiSpywarePUP.InstallCore/Variant
ZoneAlarmnot-a-virus:HEUR:AdWare.Win32.ICLoader.gen
GDataMemScan:Application.Downloader.AKR
CynetMalicious (score: 100)
AhnLab-V3PUP/Win32.ICLoader.R199084
ALYacMemScan:Application.Downloader.AKR
MAXmalware (ai score=76)
VBA32BScope.Trojan.InstallCube
MalwarebytesAdware.MegaDowl
PandaPUP/Multitoolbar
ESET-NOD32Win32/Adware.ICLoader.ME
TrendMicro-HouseCallTROJ_GEN.R002C0PAH21
TencentMalware.Win32.Gencirc.10b639b0
YandexTrojan.GenAsa!6V5gKZtxeqE
SentinelOneStatic AI – Malicious PE – Adware
MaxSecureAdware.not-a-virus.WIN32.AdWare.ICLoader.gen_188055
FortinetW32/Kryptik.GYQC!tr
AVGWin32:DangerousSig [Trj]
Cybereasonmalicious.464e3a
Qihoo-360Win32/Virus.Adware.ed9

How to remove MemScan:Application.Downloader.AKR?

MemScan:Application.Downloader.AKR removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment