Trojan

Trojan.ScriptKD.421 removal

Malware Removal

The Trojan.ScriptKD.421 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.ScriptKD.421 virus can do?

  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Russian
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs

How to determine Trojan.ScriptKD.421?


File Info:

crc32: 771B5A9A
md5: aa724bf2f62859d67d2e3cebdd9d1c9a
name: AA724BF2F62859D67D2E3CEBDD9D1C9A.mlw
sha1: 10e03b7372a2b7bbff00a47066fb44ea3aaaafdd
sha256: 8064a3f3be0d15f979975975e202426af54e775ee7cb8e4c5bdd73ddde768ebc
sha512: ed38c942cd098ed0b1306ccd967568a5fd8fb5afbbf92e1f6f03326f98d0216a246cfe7b3575f086394bbd9fe3e1603e138f1cb8055c470a9421faaa5107b973
ssdeep: 98304:oH8fsdWMDhuYTFh5UuhJBIMmyi7y2gz5VDp+:Y8MEwIMmyKMN+
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.ScriptKD.421 also known as:

BkavW32.AIDetect.malware1
ALYacGen:Variant.Delf.277
AlibabaTrojan:Win32/Starter.ali2000005
Cybereasonmalicious.2f6285
SymantecTrojan.Gen
ESET-NOD32multiple detections
APEXMalicious
AvastWin32:Malware-gen
CynetMalicious (score: 99)
KasperskyTrojan.Win32.Scar.iabq
BitDefenderTrojan.ScriptKD.421
MicroWorld-eScanTrojan.ScriptKD.421
TencentWin32.Trojan.Scar.Lnxq
Ad-AwareTrojan.ScriptKD.421
SophosGeneric PUA BA (PUA)
ComodoMalware@#37a0fzpojd0gj
TrendMicroTROJ_GEN.R002C0WK421
McAfee-GW-EditionBehavesLike.Win32.PUP.wc
FireEyeTrojan.ScriptKD.421
EmsisoftTrojan.ScriptKD.421 (B)
AviraTR/Patched.Gen
KingsoftWin32.Troj.Scar.ia.(kcloud)
GDataGen:Variant.Delf.277
McAfeeArtemis!AA724BF2F628
MAXmalware (ai score=88)
PandaTrj/Chgt.E
TrendMicro-HouseCallTROJ_GEN.R002C0WK421
FortinetW32/Delf.SDM!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan.ScriptKD.421?

Trojan.ScriptKD.421 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment