Trojan

About “Trojan-Downloader.Win32.Tovkater.jzd” infection

Malware Removal

The Trojan-Downloader.Win32.Tovkater.jzd is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Downloader.Win32.Tovkater.jzd virus can do?

  • Presents an Authenticode digital signature
  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • Behavior consistent with a dropper attempting to download the next stage.
  • Anomalous binary characteristics

Related domains:

postoperative.membedding.ru
duckandbear.top

How to determine Trojan-Downloader.Win32.Tovkater.jzd?


File Info:

crc32: 07123F2C
md5: 93e9ed709257c81b7a69d9664684128e
name: 93E9ED709257C81B7A69D9664684128E.mlw
sha1: a77efb0e8d31e4a64120bc17025caa48aa295c30
sha256: 2c6fa7bb60954bdcce604694dd805fa9a6317030fb195b080ad5a208fc21a8e1
sha512: fe806640445e7836aaf427c956b2f47269e92573cfe80aa7ec4befcf30bd64560478c604ed19495a7e9f74001a06dd573a65be6448f4154ca43fa0348a018f80
ssdeep: 3072:pND7V2BCDm6LtzutpBWMs2K/qa9XztRJGm/UwxkSig+jdUdrXApvmiqE+lDQCkGj:pr2R6xOF63XzBGmvigmYrXPiqEMkGF5D
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

LegalCopyright: Twisted village. All rights reserved.
InternalName: Download suite
FileVersion: 2.3.1.6
CompanyName: Twisted village
Comments: Download suite
ProductName: Download suite application
ProductVersion: 2.3.1.6
Translation: 0x0409 0x04b0

Trojan-Downloader.Win32.Tovkater.jzd also known as:

K7AntiVirusTrojan-Downloader ( 00587c191 )
DrWebTrojan.InstallMonster.2368
CynetMalicious (score: 100)
CAT-QuickHealPUA.MauvaiseRI.S5251627
ALYacGen:Variant.Jatif.722
CylanceUnsafe
ZillyaAdware.DLBoost.Win32.3341
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (D)
AlibabaTrojanDownloader:Win32/Tovkater.085b4d5d
K7GWTrojan-Downloader ( 00587c191 )
Cybereasonmalicious.09257c
CyrenW32/Tovkater.U.gen!Eldorado
SymantecTrojan.Gen
ESET-NOD32Win32/TrojanDownloader.Tovkater.EL
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Dropper.Tovkater-6646873-0
KasperskyTrojan-Downloader.Win32.Tovkater.jzd
BitDefenderGen:Variant.Jatif.722
NANO-AntivirusTrojan.Win32.InstallMonster.etgpkg
MicroWorld-eScanGen:Variant.Jatif.722
TencentWin32.Trojan-downloader.Tovkater.Huzh
Ad-AwareGen:Variant.Jatif.722
SophosMal/Generic-S
Comodofls.noname@0
BitDefenderThetaGen:NN.ZexaF.34170.ny0@aGZL1Kli
VIPREAmonetize (fs)
McAfee-GW-EditionGenericR-KNX!B41A8D97C9BA
FireEyeGeneric.mg.93e9ed709257c81b
EmsisoftApplication.AdLoad (A)
SentinelOneStatic AI – Suspicious PE
JiangminTrojanDownloader.Tovkater.ai
AviraHEUR/AGEN.1108483
Antiy-AVLTrojan/Generic.ASMalwS.222E4CD
MicrosoftTrojan:Win32/Occamy.C
GDataGen:Variant.Jatif.722
McAfeeArtemis!93E9ED709257
MAXmalware (ai score=93)
VBA32Trojan.Wacatac
MalwarebytesPUP.Optional.BundleInstaller
PandaTrj/Genetic.gen
RisingTrojan.Generic@ML.100 (RDML:PBo2VSzxWxLgPINxTrCZYQ)
YandexTrojan.GenAsa!fhsyPjJLJo8
IkarusTrojan-Downloader.Win32.Tovkater
FortinetW32/Tovkater.EN!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan-Downloader.Win32.Tovkater.jzd?

Trojan-Downloader.Win32.Tovkater.jzd removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment