Trojan

Trojan-Downloader.Win32.Tovkater.bqoj (file analysis)

Malware Removal

The Trojan-Downloader.Win32.Tovkater.bqoj is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Downloader.Win32.Tovkater.bqoj virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan-Downloader.Win32.Tovkater.bqoj?


File Info:

crc32: 973A46E6
md5: 9a8b10d5efcb22fd11d18c108c9a425c
name: 9A8B10D5EFCB22FD11D18C108C9A425C.mlw
sha1: 62315f28db199049d64c65d62f8f5f8b9becf365
sha256: ddf2a7e697be514aea85acd27aade5bb7e421a6092677bc24fc6ddb34cfa9585
sha512: 48e170a278d0e86d99f87d89b2e7753e6dabb47d000c0e18231247f5b13e0e6c6bb7ce9f6b75cf019ae919d94fa1304b37618c67bfc2a6ae5af2623afa150a47
ssdeep: 3072:+rV1c41UtsuoWWoGKy+mXAMEcGl1uYHECcpvrhYx:+o4U2WWoXy+Z9ck1TdcjM
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

Comments: hryjhryj sdbrtfnfhsehhsehhseh brtfn xxx iInstall software 32
Translation: 0x0409 0x04b0

Trojan-Downloader.Win32.Tovkater.bqoj also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
DrWebTrojan.InstallMonster.2500
MicroWorld-eScanTrojan.GenericKD.43941738
FireEyeGeneric.mg.9a8b10d5efcb22fd
Qihoo-360Win32/Trojan.Downloader.06e
ALYacTrojan.GenericKD.43941738
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan-Downloader ( 00520c311 )
BitDefenderTrojan.GenericKD.43941738
K7GWTrojan-Downloader ( 00520c311 )
Cybereasonmalicious.5efcb2
BitDefenderThetaAI:Packer.279156441E
CyrenW32/Tovkater.O.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Malware.Tovkater-6956309-0
KasperskyTrojan-Downloader.Win32.Tovkater.bqoj
NANO-AntivirusRiskware.Win32.InstMonster.ewfgnd
TencentWin32.Trojan-downloader.Tovkater.Hvjf
Ad-AwareTrojan.GenericKD.43941738
EmsisoftTrojan.GenericKD.43941738 (B)
ComodoApplicUnwnt@#3v7murujfje29
F-SecureAdware.ADWARE/InstMonster.Gen7
ZillyaTrojan.GenericKD.Win32.98810
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
SophosMal/Generic-S
IkarusTrojan-Downloader.Win32.Tovkater
AviraHEUR/AGEN.1117983
Antiy-AVLTrojan/Win32.Fuerboos
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/Ditertag.A
ArcabitTrojan.Generic.D29E7F6A
ZoneAlarmTrojan-Downloader.Win32.Tovkater.bqoj
GDataNSIS.Trojan-Downloader.Tovkater.C
CynetMalicious (score: 100)
AhnLab-V3PUP/Win32.InstMonster.R216132
Acronissuspicious
McAfeeArtemis!9A8B10D5EFCB
MAXmalware (ai score=89)
VBA32TrojanDownloader.Agent
MalwarebytesGeneric.Trojan.Malicious.DDS
PandaTrj/Genetic.gen
ESET-NOD32Win32/TrojanDownloader.Tovkater.IC
RisingDownloader.Tovkater!1.AF36 (CLASSIC:bWQ1OsmiWg3g3Yt77MQLydqhJrY)
YandexTrojan.GenAsa!qhYl4EpQjKc
SentinelOneStatic AI – Malicious PE – Downloader
eGambitUnsafe.AI_Score_99%
FortinetW32/Tovkater.IA!tr.dldr
AVGWin32:Malware-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Trojan-Downloader.Win32.Tovkater.bqoj?

Trojan-Downloader.Win32.Tovkater.bqoj removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment