Trojan

Trojan.Tasker.Generic removal guide

Malware Removal

The Trojan.Tasker.Generic is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Tasker.Generic virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (3 unique times)
  • Creates RWX memory
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • A process created a hidden window
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Uses Windows utilities for basic functionality
  • Deletes its original binary from disk
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz
www.Ll64keGaQa.com
zipansion.com
aporasal.net

How to determine Trojan.Tasker.Generic?


File Info:

crc32: 48A6D81F
md5: 9dc34e9130775a3ff8a15b673959be25
name: 9DC34E9130775A3FF8A15B673959BE25.mlw
sha1: a218dc6c375c7ee82d22a33270f1fa0ce831ef76
sha256: 0817e2903d28f11f854b884fe4f68f607ed4fe2e5c8e030507d9721be76a3c69
sha512: 0652e37c2a38beeaf7538b167489bc1a97a7f2a7938b54a644611b973330da1dce99a9ae4bb206daaeb1a534ab2425ddfa9988e6e4ccdb1f91ca126c566823c2
ssdeep: 6144:OzqsBi0ujBmnwiuz94Xcrj8mTSbtAKI46QkbyvY66T:GxBGj0wiAnZ+bCKL6Qk6R
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

0: [No Data]

Trojan.Tasker.Generic also known as:

BkavW32.AIDetectVM.malware2
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Trojan.Heur.TP.omW@b8s4!jc
FireEyeGeneric.mg.9dc34e9130775a3f
McAfeeGenericRXAA-AA!9DC34E913077
CylanceUnsafe
VIPREPacker.NSAnti.Gen (v)
SangforMalware
K7AntiVirusTrojan ( 004bcce41 )
BitDefenderGen:Trojan.Heur.TP.omW@b8s4!jc
K7GWTrojan ( 004bcce41 )
Cybereasonmalicious.130775
BitDefenderThetaAI:Packer.6BC746D41E
CyrenW32/S-fcf8f445!Eldorado
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallPAK_Xed-10
AvastWin32:Evo-gen [Susp]
KasperskyHEUR:Trojan.Win32.Generic
RisingTrojan.Kryptik!8.8 (TFE:dGZlOgQke/P60RQFFw)
Ad-AwareGen:Trojan.Heur.TP.omW@b8s4!jc
SophosML/PE-A + Mal/TibsPak
ComodoPacked.Win32.MUPX.Gen@24tbus
F-SecureTrojan.TR/Crypt.ULPM.Gen
TrendMicroPAK_Xed-10
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
SentinelOneStatic AI – Suspicious PE
EmsisoftGen:Trojan.Heur.TP.omW@b8s4!jc (B)
AviraTR/Crypt.ULPM.Gen
MicrosoftTrojan:Win32/Glupteba!ml
ArcabitTrojan.Heur.TP.EC3EB3
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Trojan.Heur.TP.omW@b8s4!jc
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Agent.R243892
VBA32BScope.Trojan.Wacatac
MAXmalware (ai score=82)
MalwarebytesTrojan.Tasker.Generic
PandaTrj/Genetic.gen
APEXMalicious
ESET-NOD32a variant of Win32/Injector.EAHK
eGambitUnsafe.AI_Score_98%
FortinetW32/Kryptik.FFP!tr
AVGWin32:Evo-gen [Susp]
CrowdStrikewin/malicious_confidence_60% (D)
Qihoo-360HEUR/QVM19.1.0EE9.Malware.Gen

How to remove Trojan.Tasker.Generic?

Trojan.Tasker.Generic removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment