Trojan

Should I remove “Trojan-Downloader.Win32.Taskun.kx”?

Malware Removal

The Trojan-Downloader.Win32.Taskun.kx is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Downloader.Win32.Taskun.kx virus can do?

  • Attempts to connect to a dead IP:Port (2 unique times)
  • A process attempted to delay the analysis task.
  • At least one IP Address, Domain, or File Name was found in a crypto call
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Sniffs keystrokes
  • Attempts to modify proxy settings
  • Collects information to fingerprint the system

Related domains:

z.whorecord.xyz
github.com
raw.githubusercontent.com
a.tomx.xyz
ocsp.digicert.com

How to determine Trojan-Downloader.Win32.Taskun.kx?


File Info:

crc32: DD6D6B31
md5: 5bb6d58c88622f078a01e4be78eab49d
name: ____________________-________.exe
sha1: e09460dc761eae6e5bd744690c66c195b269ac40
sha256: c71f0ebc8ff1096223731e74874bb5d0e2ef088c0e5af32658f06c1b85ac09d0
sha512: 73d6ba42df05cae91bd15a91631ca06cb0cc7e3c4faefa80a584f13be0ab15988c1f04f234ae2b85ec320c73e2bcceb8a061a1aea1047e8ee3a0e78c8f78bb5f
ssdeep: 12288:eLuCQg21YOQP8VCEZjrnZKxdYv1dnWvZ5AJJJJJJJJJJJJW:vBg2uPPCrnAxQjC
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright:
InternalName:
FileVersion: 1.1.30.03
ProductName:
ProductVersion: 1.1.30.03
FileDescription:
OriginalFilename:
Translation: 0x0409 0x04b0

Trojan-Downloader.Win32.Taskun.kx also known as:

MicroWorld-eScanTrojan.GenericKD.42852954
FireEyeTrojan.GenericKD.42852954
K7AntiVirusTrojan-Downloader ( 005432641 )
BitDefenderTrojan.GenericKD.42852954
K7GWTrojan-Downloader ( 005432641 )
APEXMalicious
ClamAVWin.Malware.Tiggre-7614037-0
GDataTrojan.GenericKD.42852954
KasperskyTrojan-Downloader.Win32.Taskun.kx
TencentWin32.Trojan-downloader.Taskun.Szby
Ad-AwareTrojan.GenericKD.42852954
EmsisoftTrojan.GenericKD.42852954 (B)
ZillyaTrojan.Azorult.Win32.7
IkarusTrojan-Downloader.Win32.Autohk
JiangminTrojan.PSW.Coins.ddf
MAXmalware (ai score=88)
Endgamemalicious (moderate confidence)
ArcabitTrojan.Generic.D28DE25A
ZoneAlarmTrojan-Downloader.Win32.Taskun.kx
MicrosoftTrojan:Win32/Wacatac.C!ml
AhnLab-V3Malware/Win32.Generic.C4010914
ALYacTrojan.GenericKD.42852954
VBA32BScope.Trojan.Bsymem
PandaTrj/CI.A
RisingMalware.Heuristic!ET#83% (RDMK:cmRtazo22P4ZQCOgEXaQ4PxIhoGx)
MaxSecureTrojan.Malware.121218.susgen
AVGFileRepMalware
CrowdStrikewin/malicious_confidence_60% (W)

How to remove Trojan-Downloader.Win32.Taskun.kx?

Trojan-Downloader.Win32.Taskun.kx removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment