Trojan.Adkor removal instruction

The Trojan.Adkor is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Adkor virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Performs some HTTP requests
Installs itself for autorun at Windows startup

Related domains:

z.whorecord.xyz

hybridview.co.kr

ad.planclick.co.kr

a.tomx.xyz

How to determine Trojan.Adkor?


File Info:
crc32: 4FA875F9
md5: 3aa4ee3bbb834066439cb2fa21f11450
name: winclientservice20181224.exe
sha1: 9116c5993cbd1410005e9ed5c3eb9888b8490bde
sha256: ebc42321b301b8eaf965b2ee62c9e1ecf3ab104409cdad797edfab648a84f098
sha512: 00a12953f3d8c4e56ad4f3dcc8cf0dc70b5d9d1bf970f965157676d4a791ec55ba0460ab78423194dd5cce54aa76e2437c64d9931af0538037630f4b4791747d
ssdeep: 49152:zTLEBVJYS9GLPSN4FDfZkPLTYxOPT2TdPilcxK/5ZiVg:zjLKODfZ6TYxOaTdPilcWXiu
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright Plan11 All rights reserved
InternalName: WinClientService
FileVersion: 2018.12.24.2
CompanyName: Plan11
Comments: R3
ProductName: WinClientService
ProductVersion: 2018.12.24.2
FileDescription: WinClientService
OriginalFilename: WinClientService.exe
Translation: 0x0409 0x04e4

Trojan.Adkor also known as:

DrWeb	Trojan.Adkor.1025
McAfee	Artemis!3AA4EE3BBB83
Malwarebytes	Adware.KorAd
K7GW	Adware ( 004f2b221 )
K7AntiVirus	Adware ( 004f2b221 )
ESET-NOD32	a variant of Win32/Adware.Kraddare.LV
ViRobot	Adware.Agent.3272872
Rising	PUA.Presenoker!8.F608 (CLOUD)
Zillya	Adware.Kraddare.Win32.7921
TrendMicro	Adware.Win32.Kraddare.AF
McAfee-GW-Edition	Artemis
Sophos	Mal/SwiftG-X
MaxSecure	Trojan.Malware.11973.susgen
Microsoft	PUA:Win32/Presenoker
AhnLab-V3	PUP/Win32.KorAd.C2903056
VBA32	Trojan.Adkor
Cylance	Unsafe
TrendMicro-HouseCall	Adware.Win32.Kraddare.AF
eGambit	Unsafe.AI_Score_99%

How to remove Trojan.Adkor?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Adkor removal instruction