Trojan.ScriptKD.4459 information

The Trojan.ScriptKD.4459 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.ScriptKD.4459 virus can do?

A file was accessed within the Public folder.
Sample contains Overlay data
Reads data out of its own binary image
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan.ScriptKD.4459?


File Info:
name: 60C2DE5E6DA26DFF97B8.mlw
path: /opt/CAPEv2/storage/binaries/dcd18d0c7384238b3fb1380d6170e51397bff34fdf21d1edd2e070ba09919bc2
crc32: D147BCD2
md5: 60c2de5e6da26dff97b8f5b0e62e8e63
sha1: 4d0cfb80243260b4e9bcac8b2afb8952292254fd
sha256: dcd18d0c7384238b3fb1380d6170e51397bff34fdf21d1edd2e070ba09919bc2
sha512: 746538b36dd4397ea6d5fb7bf1b45a4d4532a51d2ff0ebfbb8e0761bc2b9d9dc75eb08a6cb1772c6bd58247c3b5d4f4d3d83a1b08f0f85f0f05ce9d6cb6fae05
ssdeep: 98304:JSEU6d+y1ZJEwM9xNE/XURF9zLvE9QxOtNvpJ:JSEUcdZJ3M9qXo9zjiQxOtZz
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DE263341BAE2CCB0D633553656386B654A3D74101FDD8E8EE3E01F2A6B3A181E719F63
sha3_384: 957baca501faf0fb5fa740d289323b61745a8e1340bfff3db0522846a3439e4affdbba9d53cbff8db76077c40b0b9469
ep_bytes: e899040000e980feffff3b0db8914300
timestamp: 2016-08-14 19:15:49

Version Info:
0: [No Data]

Trojan.ScriptKD.4459 also known as:

Bkav	W32.Common.DC061670
Lionic	Trojan.Win32.ScriptKD.4!c
MicroWorld-eScan	Trojan.ScriptKD.4459
FireEye	Trojan.ScriptKD.4459
ALYac	Trojan.ScriptKD.4459
Cylance	unsafe
VIPRE	Trojan.ScriptKD.4459
Sangfor	Trojan.Win32.Agent.Vutr
Cybereason	malicious.e6da26
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
BitDefender	Trojan.ScriptKD.4459
Emsisoft	Trojan.ScriptKD.4459 (B)
Ikarus	Trojan.ScriptKD
Webroot	W32.Trojan.Gen
GData	Trojan.ScriptKD.4459
Malwarebytes	Generic.Malware/Suspicious
TrendMicro-HouseCall	TROJ_GEN.R002H0CAU24
Fortinet	Adware/Generic
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Trojan.ScriptKD.4459?

Trojan.ScriptKD.4459 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X