Trojan

How to remove “Trojan.Agent.CKLI”?

Malware Removal

The Trojan.Agent.CKLI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.CKLI virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Agent.CKLI?


File Info:

crc32: 1CD02089
md5: adb5ec28b06866e9b02ee31e86629154
name: ADB5EC28B06866E9B02EE31E86629154.mlw
sha1: c25123c0de7a2b2d80f6a09c8718002c76ca47a1
sha256: ddaac2ae4b3ef27310dbf828fb7c435face9b70bb211ca6d8ee51e4f8bd378da
sha512: 3cf28f6110c61d5cd0c0d492fb1e0c549d20c3e481149dd1c4e2a9da0bc3a1687b64a65ef9374cdb17b41709fa89428c6ca5a0b2f62d37da5ec1ae8568a6fdd8
ssdeep: 12288:XsvLaZDlmVdYdeQwHB6plyMUo5AnyJgqYc7U8FZI2wci:cvLqZSdYQQwHUplyMUHyiqZQ8Ji
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Agent.CKLI also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Agent.CKLI
FireEyeGeneric.mg.adb5ec28b06866e9
McAfeePacked-PB.c!ADB5EC28B068
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Generic.4!c
SangforMalware
K7AntiVirusTrojan ( 00512c141 )
BitDefenderTrojan.Agent.CKLI
K7GWTrojan ( 00513a9a1 )
Cybereasonmalicious.8b0686
BitDefenderThetaGen:NN.ZexaF.34804.PqX@aCMLman
CyrenW32/S-5248149b!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan.Win32.Regsup.pef
NANO-AntivirusTrojan.Win32.Cryptoff.erofan
TencentMalware.Win32.Gencirc.10b1e80e
Ad-AwareTrojan.Agent.CKLI
EmsisoftTrojan.Agent.CKLI (B)
ComodoTrojWare.Win32.Cryptoff.FVBV@7ekner
F-SecureTrojan.TR/AD.Nymaim.jgr
DrWebTrojan.Siggen7.30342
ZillyaTrojan.Cryptoff.Win32.16
TrendMicroTROJ_NYMAIM.SMR2
McAfee-GW-EditionPacked-PB.c!ADB5EC28B068
SophosMal/Generic-S
IkarusTrojan.Inject
JiangminTrojan.Cryptoff.x
AviraTR/AD.Nymaim.jgr
Antiy-AVLTrojan[Ransom]/Win32.Cryptoff
MicrosoftTrojanDownloader:Win32/Silcon!rfn
ArcabitTrojan.Agent.CKLI
ZoneAlarmHEUR:Trojan.Win32.Regsup.pef
GDataTrojan.Agent.CKLI
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Kryptik.R205904
Acronissuspicious
VBA32Hoax.Cryptoff
MAXmalware (ai score=85)
MalwarebytesTrojan.Nymaim
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Kryptik.FVIG
TrendMicro-HouseCallTROJ_NYMAIM.SMR2
RisingRansom.Cryptoff!8.E62C (TFE:2:QGU5IWNaIzS)
YandexTrojan.Cryptoff!UG2UHe6ELkw
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_99%
FortinetW32/Nymaim.BA!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360Win32/Trojan.Cryptoff.U

How to remove Trojan.Agent.CKLI?

Trojan.Agent.CKLI removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment