Categories: Trojan

Trojan-Downloader.Win32.Tovkater.bgfs removal guide

The Trojan-Downloader.Win32.Tovkater.bgfs is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Downloader.Win32.Tovkater.bgfs virus can do?

Reads data out of its own binary image
A process created a hidden window
Drops a binary and executes it
Behavior consistent with a dropper attempting to download the next stage.
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

fiesta.younged.ru

mirraclez.club

a.tomx.xyz

How to determine Trojan-Downloader.Win32.Tovkater.bgfs?


File Info:
crc32: CE54738Emd5: d4d6de7c6c78e3342cb92a4e2668453cname: D4D6DE7C6C78E3342CB92A4E2668453C.mlwsha1: c1df8e254a1f8221e76056402f409725e1e04a11sha256: 5f9827ccc9267bf4a358c60a50f36926815bb49a09117e945e61aab927b360a4sha512: b32125be536464b37c14a0034579cadb04dd851997f708b308c268609ed313c6e09494e0da599674a6e2ec459c3ab397ce954825af4303419a8de8d2390c34d0ssdeep: 6144:eo4U3QIWoW8WJcUOn6Wl/5wG2G07rKNRsBKATUylLL+5M/C7fSDbgcY8t:ZQdoW8Mcv6OWBryurLL+q/MfQgGttype: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Version Info:
Comments: fgndtyxxx iInstall software 32Translation: 0x0409 0x04b0

Trojan-Downloader.Win32.Tovkater.bgfs also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan-Downloader ( 0051eb601 )
Lionic	Riskware.Win32.Generic.1!c
Elastic	malicious (high confidence)
DrWeb	Trojan.InstallMonster.2487
Cynet	Malicious (score: 100)
ALYac	Dropped:Trojan.GenericKD.12667635
Cylance	Unsafe
Sangfor	Trojan.Win32.GenericKD.12667635
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	TrojanDownloader:Win32/Tovkater.bfc6b09e
K7GW	Trojan-Downloader ( 0051eb601 )
Cybereason	malicious.c6c78e
Cyren	W32/Tovkater.L
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	multiple detections
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Tovkater-6936213-0
Kaspersky	Trojan-Downloader.Win32.Tovkater.bgfs
BitDefender	Dropped:Trojan.GenericKD.12667635
NANO-Antivirus	Trojan.Win32.InstallMonster.evxcms
MicroWorld-eScan	Dropped:Trojan.GenericKD.12667635
Tencent	Win32.Trojan-downloader.Tovkater.Wstq
Ad-Aware	Dropped:Trojan.GenericKD.12667635
Sophos	Mal/Generic-S
Comodo	Application.Win32.InstallMonster.DX@7e9j3l
BitDefenderTheta	Gen:NN.ZexaF.34294.5y0@aigE5Up
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Possible_HPGen-32
McAfee-GW-Edition	BehavesLike.Win32.Generic.fc
FireEye	Generic.mg.d4d6de7c6c78e334
Emsisoft	Dropped:Trojan.GenericKD.12667635 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1117983
Antiy-AVL	Trojan/Generic.ASMalwS.236892D
Microsoft	Trojan:Win32/Occamy.C
GData	Dropped:Trojan.GenericKD.12667635
AhnLab-V3	Trojan/Win32.Tovkater.R215387
Acronis	suspicious
McAfee	Artemis!D4D6DE7C6C78
MAX	malware (ai score=97)
VBA32	TrojanDownloader.Tovkater
Malwarebytes	Malware.AI.3039103122
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	Possible_HPGen-32
Rising	Malware.Obscure/Heur!1.A89E (CLASSIC)
Yandex	Trojan.GenAsa!dgqaeC6Y+pQ
Fortinet	W32/Tovkater.IA!tr.dldr
AVG	Win32:Malware-gen
Paloalto	generic.ml