What is "Trojan.Win32.DiskWriter.atn"?

The Trojan.Win32.DiskWriter.atn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.DiskWriter.atn virus can do?

Executable code extraction
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Uses Windows utilities for basic functionality
Likely installs a bootkit via raw harddisk modifications
Attempts to restart the guest VM
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Win32.DiskWriter.atn?


File Info:
crc32: E0851097
md5: 8fdb20f712226e7c66c36a5a64040af9
name: 8FDB20F712226E7C66C36A5A64040AF9.mlw
sha1: 79b25d80e1db5bb62e40a77af4a97efea57e0d92
sha256: c8e84a5ade44620462a7c53ea00f82063ba684c2d51262e1eef8f3070ebf1612
sha512: 5eb422e0dc03644a879ec2504b51022593620c388a014e9c2005aaca69de955a3483540c79113ef81cbab20a689182e3a3ec5c93817ec469ce9c0491997b1f76
ssdeep: 192:/To4c18meqyWvn8YkGMr1OrBWPI7At7M1cMEHtMNRMkUzD8QXHG:/T618dqyWvnbI1Rd731HtovID8QXm
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0804 0x04b0
InternalName: x8d85x9177x5f00x673ax63d0x793ax8bedx8f6fx4ef6 V 1.0
FileVersion: 1.00
CompanyName: x4e2dx56fdx79d1x5b66x9662x7814x7a76x751fx9662
ProductName: x5de5x7a0b1
ProductVersion: 1.00
OriginalFilename: x8d85x9177x5f00x673ax63d0x793ax8bedx8f6fx4ef6 V 1.0.exe

Trojan.Win32.DiskWriter.atn also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Lionic	Trojan.Win32.DiskWriter.4!c
Cylance	Unsafe
Sangfor	Trojan.Win32.DiskWriter.atn
K7GW	Riskware ( 0040eff71 )
Symantec	Trojan.Gen.2
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.DiskWriter.atn
Tencent	Win32.Trojan.Mbrmodifier.Auto
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.BadFile.mz
Antiy-AVL	Trojan/Generic.ASMalwS.23F53F7
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Artemis!8FDB20F71222
MAX	malware (ai score=97)
Malwarebytes	MachineLearning/Anomalous.94%
Panda	Trj/GdSda.A
Yandex	Trojan.DiskWriter!CZu8menKkmo
Fortinet	W32/Dorkbot.BAA!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.DiskWriter.HgIASQsA

How to remove Trojan.Win32.DiskWriter.atn?

Trojan.Win32.DiskWriter.atn removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Trojan.Win32.DiskWriter.atn”?