Trojan

Trojan.Aksula.A removal

Malware Removal

The Trojan.Aksula.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Aksula.A virus can do?

  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan.Aksula.A?


File Info:

name: B1D27978A785E29EE916.mlw
path: /opt/CAPEv2/storage/binaries/7f8f23b8a8617273f41cc0c13172f1f83378453146f9f88543326ab4964e564c
crc32: BFD71F8A
md5: b1d27978a785e29ee916ae9ee9e3bcda
sha1: fed1c1ea6bd0bb805e715b7fcac496b4421fdef3
sha256: 7f8f23b8a8617273f41cc0c13172f1f83378453146f9f88543326ab4964e564c
sha512: cde75a3bf42759de01041cb6dfb8f31f157b457564bbf4efd5d50c5d94785934937c4c2ab635cbcb38e8ba906d2f71e259b5d5a43db5b8435b6be11efe0e1bdb
ssdeep: 6144:b6M96wgvRHCzOYtqlGyzcsX3KA0LQIQR:Wi3gNCpOdn/u
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AB14014D6E934127D9848A7082D04ED807FCAC473D9275AFFFB098462974099A9F88FE
sha3_384: d38f845e9edb63184b5d77373e2a0159f204eb6cc24653ed8a0871829a459784eda152f0a519de91511b733ff55d623f
ep_bytes: 558bc8e923f802005058e9b3f6020090
timestamp: 2012-01-21 11:43:07

Version Info:

0: [No Data]

Trojan.Aksula.A also known as:

BkavW32.AIDetectMalware
DrWebTrojan.SpyBot.324
MicroWorld-eScanTrojan.GenericKDZ.41799
ClamAVWin.Malware.Generickdz-6957625-0
CAT-QuickHealTrojan.Aksula.A
McAfeeGenericRXAA-AA!B1D27978A785
MalwarebytesMalware.AI.2084250538
SangforTrojan.Win32.Save.a
Cybereasonmalicious.8a785e
BitDefenderThetaAI:Packer.B5EED68D20
VirITTrojan.Win32.Dialer.AHYB
CyrenW32/Zegost.MYEI-4034
SymantecBackdoor.Trojan
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Farfli_AGen.AB
ZonerTrojan.Win32.22067
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Farfli.gen
BitDefenderTrojan.GenericKDZ.41799
SUPERAntiSpywareTrojan.Agent/Gen-Zegost
AvastWin32:Dropper-JQQ [Drp]
TencentTrojan.Win32.Lebag.b
TACHYONTrojan/W32.Agent.200704.AVB
EmsisoftTrojan.GenericKDZ.41799 (B)
F-SecureBackdoor.BDS/Zegost.birna
BaiduWin32.Trojan.Dialer.d
VIPRETrojan.GenericKDZ.41799
TrendMicroTROJ_AGENT_028621.TOMB
McAfee-GW-EditionBehavesLike.Win32.Backdoor.cc
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.b1d27978a785e29e
SophosML/PE-A
SentinelOneStatic AI – Suspicious PE
GDataTrojan.GenericKDZ.41799
AviraBDS/Zegost.birna
Antiy-AVLTrojan/Win32.Dialer.ansz
XcitiumTrojWare.Win32.Agent.PDSB@4q3i1w
ArcabitTrojan.Generic.DA347
ZoneAlarmHEUR:Trojan.Win32.Farfli.gen
MicrosoftBackdoor:Win32/Farfli.FT!MTB
GoogleDetected
AhnLab-V3Trojan/Win32.Dialer.R21388
VBA32Trojan.Farfli
ALYacTrojan.GenericKDZ.41799
MAXmalware (ai score=82)
Cylanceunsafe
TrendMicro-HouseCallTROJ_AGENT_028621.TOMB
RisingTrojan.Win32.Lebag.b (CLASSIC)
IkarusTrojan.Win32.Spy
FortinetW32/Wacatac.B!tr
AVGWin32:Dropper-JQQ [Drp]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Trojan.Aksula.A?

Trojan.Aksula.A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment