Trojan

Trojan.Killav.16768 information

Malware Removal

The Trojan.Killav.16768 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Killav.16768 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Dynamic (imported) function loading detected
  • Unconventionial language used in binary resources: Russian
  • Authenticode signature is invalid
  • A ping command was executed with the -n argument possibly to delay analysis
  • Uses Windows utilities for basic functionality
  • Anomalous binary characteristics

How to determine Trojan.Killav.16768?


File Info:

name: 8120B1216378CAEC49B0.mlw
path: /opt/CAPEv2/storage/binaries/8a66b654dd96260c293624e0454c914f9cd1093ff8bfcd8aa25f2335fafb86de
crc32: DF7BAE75
md5: 8120b1216378caec49b081151e8d722e
sha1: ce494f9b3b3e62ce929d9609a2f2d70ceddd9b6c
sha256: 8a66b654dd96260c293624e0454c914f9cd1093ff8bfcd8aa25f2335fafb86de
sha512: ad150e6326f543745303573c74323e148ffe330037b02f2fcf334c5d8ba838cc91eb3bf42753f8edde0987876391a3cbc4885df938bf78c3c1eb123523615ae4
ssdeep: 96:XO30H0GV2/wU1cpsjB/yV7nS62sQC4o4fOYyTSzm9izZp43Z9NPQ:40H0G6wU1cpsJyV7SM4o4feeEEZpaHI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10D72A10E2D0B45A3E8044870E6C619D25FFD8C273AC73A7FDF09988169E414E46E2EF9
sha3_384: b59804c703370b25d9b41386a82681061880bfdcf686329f85f6387d1de00ec2792d2ee607092900a391ff5040527b69
ep_bytes: 558bec81ecb00400005356ff15041040
timestamp: 2006-01-25 17:08:15

Version Info:

0: [No Data]

Trojan.Killav.16768 also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Killav.16768
MalwarebytesMalware.AI.203903396
K7AntiVirusHacktool ( 005287431 )
K7GWHacktool ( 005287431 )
Cybereasonmalicious.b3b3e6
VirITTrojan.Win32.Generic.ZIT
CyrenW32/Trojan.LYBU-2858
SymantecML.Attribute.HighConfidence
APEXMalicious
ClamAVWin.Trojan.Agent-237736
KasperskyUDS:DangerousObject.Multi.Generic
NANO-AntivirusTrojan.Win32.Dwn.fidinm
RisingTrojan.Occamy!8.F1CD (RDMK:cmRtazoehP8c7LXOKTDzF4DpYLnz)
ComodoMalware@#3n9pfrv2kkc4y
McAfee-GW-EditionArtemis
FireEyeGeneric.mg.8120b1216378caec
SophosGeneric ML PUA (PUA)
SentinelOneStatic AI – Suspicious PE
MicrosoftTrojan:Win32/Casur.A!cl
GDataWin32.Trojan.Small.A
AhnLab-V3Trojan/Win32.Runner.C65895
McAfeeArtemis!8120B1216378
CylanceUnsafe
PandaAdware/Startpage.CTK
TrendMicro-HouseCallTROJ_GEN.R03BH0CKP21
TencentMalware.Win32.Gencirc.10bb907b
IkarusTrojan-Downloader.VBS.Agent
eGambitUnsafe.AI_Score_96%
FortinetW32/Generic.AC.2150ED!tr
AVGWin32:Trojan-gen
AvastWin32:Trojan-gen
MaxSecureTrojan.Malware.7175209.susgen

How to remove Trojan.Killav.16768?

Trojan.Killav.16768 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment