Trojan.Generic.KD.300418 removal guide

The Trojan.Generic.KD.300418 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.KD.300418 virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Uses Windows utilities for basic functionality
Executed a process and injected code into it, probably while unpacking
Attempts to restart the guest VM
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs
Creates a copy of itself
Uses suspicious command line tools or Windows utilities

Related domains:

edgedl.me.gvt1.com

update.googleapis.com

How to determine Trojan.Generic.KD.300418?


File Info:
crc32: 00FA1714
md5: 1fc48a8e799e05b5ad4f24cab11b5198
name: 1FC48A8E799E05B5AD4F24CAB11B5198.mlw
sha1: 1154dbcef8342f61c2c440b585531a235fed1f33
sha256: 2b2c595d9309fefae84082d711f5b7af6369030377fd9864bfbb06e08dc2196c
sha512: 0452c82312b30d228d20cbac9728c7e231b1b5af91038d365e785cf8fed34d991f953636054d9c1c11fe376736e68899fa4694373ff3fa82a60c54c456eaf9b9
ssdeep: 1536:ymTulkHB1rsbKSp5MS6IqPElDr1HiZVtH2PKRHpNFyLqD1nouy83l:BY+nrsbKSpbh/lDrFiZVtWi7nyuDtou
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: Scala Hemingway Sandburg Armonk Dewitt
InternalName: kaftn
FileVersion: 5.06.0006
CompanyName: Johannes Signora Belgium Arturo Cicero
Comments: Liechtenstein Uniroyal Celt Darius Triangulum
ProductName: Mirfak Richter
ProductVersion: 5.06.0006
FileDescription: Schroeder Bolshevist Geigy Fairfax
OriginalFilename: kaftn.exe

Trojan.Generic.KD.300418 also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0001140e1 )
Lionic	Trojan.Win32.Mbro.j!c
DrWeb	Trojan.MulDrop2.50041
Cynet	Malicious (score: 100)
ALYac	Trojan.Generic.KD.300418
Cylance	Unsafe
Zillya	Trojan.Mbro.Win32.13
Alibaba	Ransom:Win32/Timer.d9f0827a
K7GW	Trojan ( 0001140e1 )
Cybereason	malicious.e799e0
Cyren	W32/Ransom.DKKE-8483
ESET-NOD32	Win32/LockScreen.AGM
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Ransomware.Barys-6978940-0
Kaspersky	Trojan-Ransom.Win32.Timer.kkc
BitDefender	Trojan.Generic.KD.300418
NANO-Antivirus	Trojan.Win32.MLW.cvzcz
ViRobot	Trojan.Win32.A.Timer.69632.C
MicroWorld-eScan	Trojan.Generic.KD.300418
Tencent	Win32.Trojan.Timer.mau
Ad-Aware	Trojan.Generic.KD.300418
Comodo	Malware@#32ov48fj8txxo
BitDefenderTheta	AI:Packer.9AC3A97920
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_RANSOM.VS
FireEye	Trojan.Generic.KD.300418
Emsisoft	Trojan.Generic.KD.300418 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan/Timer.eit
Webroot	W32.Ransom.Pornorolik
Avira	TR/Samca.hcywf
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.108ABB7
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Vigorf.A
Arcabit	Trojan.Generic.KD.D49582
GData	Trojan.Generic.KD.300418
McAfee	Generic.gv
MAX	malware (ai score=100)
VBA32	Hoax.Timer
Malwarebytes	Backdoor.Bot
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_RANSOM.VS
Yandex	Trojan.LockScreen!Vs5GlKPdIEk
Ikarus	Trojan.Win32.Ransom
MaxSecure	Trojan.Malware.119788117.susgen
Fortinet	W32/Mbro.RY!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Trojan.Generic.KD.300418?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Generic.KD.300418 removal guide