Trojan-Banker.Win32.Agent.aeik (file analysis)

The Trojan-Banker.Win32.Agent.aeik is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Banker.Win32.Agent.aeik virus can do?

Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Unconventionial language used in binary resources: Russian
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan-Banker.Win32.Agent.aeik?


File Info:
crc32: A3B234AB
md5: aaaeb26ff5738115b54c7fd616a7d92a
name: AAAEB26FF5738115B54C7FD616A7D92A.mlw
sha1: 0959268194e1faa5992665f91cbf8e00bf8ad38d
sha256: a8412291d9a86814efa3d5891280b89131db2316e9eea07a289b79b084aebf7b
sha512: 6c2063940e1b16fb0be5a5d916f1823992d481d3d41d713a7640bc91d52c13792f6c6f41fd2ffb9a307423874af8ad4a90d233fd84c3832776c2c38f9c44730c
ssdeep: 24576:KmoO8itDsZ9dIVUpCuhLodkdLZQNni57LBsnatD58DyCTYCRmqIqpKN:BOZTKUpCuRodkHf5pu+DWmCZwqIqi
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Trojan-Banker.Win32.Agent.aeik also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 005239281 )
Cynet	Malicious (score: 99)
ALYac	Trojan.GenericKD.4004191
Sangfor	Trojan.Win32.CryptoJacker.A
K7GW	Trojan ( 005239281 )
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of Win32/ClipBanker.CF
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Dropper.DarkKomet-9370806-0
Kaspersky	Trojan-Banker.Win32.Agent.aeik
BitDefender	Trojan.GenericKD.4004191
NANO-Antivirus	Trojan.Win32.ClipBanker.exmnvi
MicroWorld-eScan	Trojan.GenericKD.4004191
Tencent	Win32.Trojan.Generic.Lpbq
Ad-Aware	Trojan.GenericKD.4004191
Sophos	Generic ML PUA (PUA)
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
FireEye	Generic.mg.aaaeb26ff5738115
Emsisoft	Trojan.GenericKD.4004191 (B)
Avira	TR/ClipBanker.gwore
eGambit	Unsafe.AI_Score_96%
Microsoft	Trojan:Win32/Ditertag.A
Arcabit	Trojan.Generic.D3D195F
AegisLab	Trojan.Win32.Generic.4!c
GData	Trojan.GenericKD.4004191
McAfee	Artemis!AAAEB26FF573
MAX	malware (ai score=89)
Malwarebytes	Malware.AI.3482600390
Panda	Trj/CI.A
Ikarus	Trojan.Win32.Clipbanker
Fortinet	W32/Generic.AC.403b7c!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Trojan-Banker.Win32.Agent.aeik?

Trojan-Banker.Win32.Agent.aeik removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan-Banker.Win32.Agent.aeik (file analysis)