TrojanClicker:Win32/Cookster.A removal tips

The TrojanClicker:Win32/Cookster.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What TrojanClicker:Win32/Cookster.A virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine TrojanClicker:Win32/Cookster.A?


File Info:
name: 5C33830F77475E3FA45E.mlw
path: /opt/CAPEv2/storage/binaries/8fd1077027be232f35ccc4213583570b4ac8dc6c91478dfc17a66dc6b7fd1d96
crc32: C7C22C18
md5: 5c33830f77475e3fa45e600b1aad45c5
sha1: 0f9015974ba89b1a3a1bf620979ff4f61ec2c01b
sha256: 8fd1077027be232f35ccc4213583570b4ac8dc6c91478dfc17a66dc6b7fd1d96
sha512: cd4ecb778144fa511ab8d916ce11346d67a8813f417e5d3b6fddbd6afcbebd6853678164fbdf61d7118233312fc2a3e12a46c3addede8ac53d4b2655e7220a05
ssdeep: 24576:P+DScw/8FlebGOGZL73IPJCovOByFVnf32tzJY1/v8R:2DScLydG73IP/6zJ+MR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11F25BF1279E2E0FAC75161F00DAA6B3AF6B58A454B268FC35394DF1C4E32981973B13D
sha3_384: d62f11c9120125a204148cd6bc1b3e1453b0dd16b1b66ab4fbd9ad4600636f53951232e96148edc4f88ea6449b543c0b
ep_bytes: 558bec6aff683066640068bcc1440064
timestamp: 2012-05-12 13:20:37

Version Info:
0: [No Data]

TrojanClicker:Win32/Cookster.A also known as:

Bkav	W32.AIDetectMalware
DrWeb	BackDoor.Poison.696
ClamAV	Win.Trojan.Scar-6367
FireEye	Generic.mg.5c33830f77475e3f
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Trojan.Genome.Win32.235017
Cybereason	malicious.74ba89
Cyren	W32/FraudLoad.F33_DET!Eldorado
APEX	Malicious
Cynet	Malicious (score: 100)
NANO-Antivirus	Trojan.Win32.TrjGen.dkhowd
Avast	Win32:Sentry [Trj]
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
Sophos	Generic ML PUA (PUA)
Ikarus	Backdoor.Win32.Hupigon
GData	Win32.Trojan.PSE.1BDV25M
Jiangmin	Trojan.Generic.jxjy
Antiy-AVL	Trojan/Win32.FlyStudio.a
Kingsoft	malware.kb.a.968
Xcitium	Worm.Win32.Dropper.RA@1qraug
Microsoft	TrojanClicker:Win32/Cookster.A
Google	Detected
VBA32	Trojan.Scar
Rising	Trojan.Generic@AI.100 (RDML:h/0n26VWqE/X7UWXK4utqw)
Yandex	Trojan.Pasta.Gen.1
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/CoinMiner.PHP!tr
AVG	Win32:Sentry [Trj]
CrowdStrike	win/malicious_confidence_70% (D)

How to remove TrojanClicker:Win32/Cookster.A?

TrojanClicker:Win32/Cookster.A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X