Troj/Steal-ATI (file analysis)

The Troj/Steal-ATI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Troj/Steal-ATI virus can do?

How to determine Troj/Steal-ATI?


File Info:
crc32: 36B8BD0C
md5: 14445833baf663c58183ee2d8f4bddd9
name: upload_file
sha1: ed170fbeb89338c9600c19a4253fe081d442e201
sha256: 41224fc86e123f70e5f6960a3cc7bafe093ad8f7b6dd7cf4ce6ab43d4bb1fee3
sha512: fb555288303c22c6b7dbb56650ac2d99d47019254d20bce87710dfbd0a58f9a03da598c6b11c7524148f882f2bb8a6a967b420256aaa2948f9edc471500ac6f2
ssdeep: 12288:5s6WmC72mCM9JZQJgK2HF4MtMHBjMZaFsWcOJqpZz5CgltLgDM:5svPJSJ+HFt0MysGMpldgw
type: RAR archive data, vb5, flags: Archive volume, Commented, Locked, Solid, Authenticated,

Version Info:
0: [No Data]

Troj/Steal-ATI also known as:

DrWeb	BackDoor.SpyBotNET.17
FireEye	Trojan.GenericKD.34751448
McAfee	Artemis!14445833BAF6
Malwarebytes	Trojan.MalPack
K7AntiVirus	Trojan ( 00564f471 )
K7GW	Trojan ( 00564f471 )
TrendMicro	Trojan.Win32.MALREP.THJACBO
BitDefenderTheta	Gen:NN.ZelphiF.34566.9G0@aeVjWimi
Cyren	W32/Injector.IWML-6060
Avast	Win32:Trojan-gen
ClamAV	Win.Malware.Generic-9777076-0
Kaspersky	HEUR:Trojan.Win32.Kryptik.gen
BitDefender	Trojan.GenericKD.34751448
Rising	Trojan.Injector!1.CD4A (CLASSIC)
Sophos	Troj/Steal-ATI
Comodo	Malware@#2ax4v275wl9hx
Invincea	Mal/Generic-R + Troj/Steal-ATI
Emsisoft	Trojan.GenericKD.34751448 (B)
Ikarus	Trojan.Win32.Injector
Antiy-AVL	Trojan/Win32.Kryptik
Microsoft	Trojan:Win32/LokibotCrypt.RK!MTB
Arcabit	Trojan.Generic.D21243D8
ZoneAlarm	HEUR:Trojan.Win32.Kryptik.gen
GData	Win32.Trojan.PSE.VH2U3I
AhnLab-V3	Trojan/Win32.Injector.R353017
VBA32	TScope.Trojan.Delf
ALYac	Trojan.GenericKD.34751448
MAX	malware (ai score=85)
Zoner	Trojan.Win32.95824
ESET-NOD32	a variant of Win32/Injector.ENPK
Tencent	Win32.Trojan.Kryptik.Dvzo
SentinelOne	DFI – Suspicious Archive
Fortinet	W32/GenKryptik.ETYV!tr
AVG	Win32:Trojan-gen

How to remove Troj/Steal-ATI?

Troj/Steal-ATI removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X