About “Trojan-Proxy.Win32.Qukart.aocv” infection

The Trojan-Proxy.Win32.Qukart.aocv is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-Proxy.Win32.Qukart.aocv virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan-Proxy.Win32.Qukart.aocv?


File Info:
name: 1A5F43A0D2A144B3E4C6.mlw
path: /opt/CAPEv2/storage/binaries/625d5060dc8e750332abf43b8a652bba79900f80856bf3e3b526064ef653afbc
crc32: 65A1BBDC
md5: 1a5f43a0d2a144b3e4c6f06d67033df1
sha1: 4e7a8c3a36f514aefbebbfff5bbb58d8bc082cfc
sha256: 625d5060dc8e750332abf43b8a652bba79900f80856bf3e3b526064ef653afbc
sha512: ff6be41bf47e1b336803363ed350d8d0da12c2c394d083733961a254dc7d894a623e6239af65b378fb2f8ca8e9447596545c748fbc2595afb2edcd0442518378
ssdeep: 768:hDApAJmxwUh6zO5g7Wfb8BvTRbdUE6Sijv7xC:BsASwKScoNSLD
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12824083A15C09265C5588CB222B95FF2D87A55B022BE7D4AE3C0C6F1F07644BEA3978D
sha3_384: 3493bd3e16bacb19374ce6c9e13fc5d653dd4e857d00c2a9ef3b6e9f77ac63858925bb4aa555702b6472c1d5c1f75bbc
ep_bytes: 00000000000000000000000000000000
timestamp: 2010-04-22 22:06:51

Version Info:
0: [No Data]

Trojan-Proxy.Win32.Qukart.aocv also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Qukart.4!c
FireEye	Generic.mg.1a5f43a0d2a144b3
McAfee	Artemis!1A5F43A0D2A1
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	Trojan:Win32/Qukart.316b9ae1
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_100% (W)
Cyren	W32/Heuristic-CO3!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Proxy.Win32.Qukart.aocv
Avast	Win32:Evo-gen [Trj]
Tencent	Malware.Win32.Gencirc.10beb94c
McAfee-GW-Edition	BehavesLike.Win32.Infected.dz
Sophos	Mal/Generic-S
Ikarus	Trojan.Spy.Qukart
GData	Win32.Trojan.PSE.1UTDITT
ZoneAlarm	Trojan-Proxy.Win32.Qukart.aocv
Microsoft	Program:Win32/Wacapew.C!ml
Google	Detected
Cylance	unsafe
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002H07FM23
Rising	Backdoor.Qakbot!1.A74D (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Evo-gen [Trj]
Cybereason	malicious.a36f51
DeepInstinct	MALICIOUS

How to remove Trojan-Proxy.Win32.Qukart.aocv?

Trojan-Proxy.Win32.Qukart.aocv removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X