About “TrojanDownloader:Win32/Broskod.A!bit” infection

The TrojanDownloader:Win32/Broskod.A!bit is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What TrojanDownloader:Win32/Broskod.A!bit virus can do?

Dynamic (imported) function loading detected
Reads data out of its own binary image
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine TrojanDownloader:Win32/Broskod.A!bit?


File Info:
name: C22910CF46DC31FD046B.mlw
path: /opt/CAPEv2/storage/binaries/7be32a462b045c6cd1b58ee15193a4deb3a7ea33970baec876b3df988861325d
crc32: 5F9DD976
md5: c22910cf46dc31fd046b8a348064fb0e
sha1: 3153dedfd951abebe38fbed96f16a9eb8c72b60d
sha256: 7be32a462b045c6cd1b58ee15193a4deb3a7ea33970baec876b3df988861325d
sha512: 598427fb9454d1c3ce6f400a0330d9f5b9e360180187065e054b351ac49924a7151489d0de535f27040b65f239048be3be812dbd8c77bd4dff0957cf07ec39db
ssdeep: 3072:q7lWcSzoFrJltLwmZGNcx+rAdvUXu3ER4+UUMVgwUUt2M4uxewcDVE9jEXb4+gTz:kOKtUEx6ovUXu3ER4+UUMVgwUUt2M4ud
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T167E37D167542C8DAC76340F1828B6B5B5F56BE210E6360E757C87F0EAFF10B56A3B082
sha3_384: eb2bff020e75b0744413be2fcf886463210bca30427d4e847a5601eda3d07480c2f735edb915a599d400faefcbfa493f
ep_bytes: 558bec6aff68b890400068506c400064
timestamp: 2014-09-14 07:20:22

Version Info:
0: [No Data]

TrojanDownloader:Win32/Broskod.A!bit also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader16.16954
MicroWorld-eScan	Gen:Variant.Doina.25190
FireEye	Generic.mg.c22910cf46dc31fd
CAT-QuickHeal	Trojan.Mauvaise.SL1
McAfee	GenericRXAN-DG!C22910CF46DC
Cylance	Unsafe
Zillya	Backdoor.Finfish.Win32.18
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan-Downloader ( 005412be1 )
K7AntiVirus	Trojan-Downloader ( 005412be1 )
BitDefenderTheta	Gen:NN.ZexaF.34294.iqZ@aSTT2bcb
Cyren	W32/Agent.DQN.gen!Eldorado
Symantec	Downloader
ESET-NOD32	Win32/TrojanDownloader.Agent.CWI
ClamAV	Win.Malware.Broskod-6804161-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Doina.25190
NANO-Antivirus	Trojan.Win32.Dwn.dwrwuh
Avast	Win32:DropperX-gen [Drp]
Tencent	Trojan.Win32.BitCoinMiner.la
Ad-Aware	Gen:Variant.Doina.25190
Emsisoft	Gen:Variant.Doina.25190 (B)
Comodo	TrojWare.Win32.TrojanDownloader.Broskod.SA@6vorj1
McAfee-GW-Edition	BehavesLike.Win32.Generic.ch
SentinelOne	Static AI – Suspicious PE
Sophos	ML/PE-A
GData	Win32.Trojan.PSE.13RMOHK
Jiangmin	Backdoor/Finfish.d
Avira	HEUR/AGEN.1121102
Antiy-AVL	Trojan/Generic.ASMalwS.E5F25C
Microsoft	TrojanDownloader:Win32/Broskod.A!bit
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Broskod.R190001
VBA32	Trojan.Broskod
ALYac	Gen:Variant.Doina.25190
Malwarebytes	Trojan.Downloader
APEX	Malicious
Rising	Malware.FakeXLS/ICON!1.9C3D (CLASSIC)
MAX	malware (ai score=81)
eGambit	Unsafe.AI_Score_96%
Fortinet	W32/Agent.CWI!tr
AVG	Win32:DropperX-gen [Drp]
Cybereason	malicious.f46dc3
MaxSecure	Trojan.Malware.300983.susgen

How to remove TrojanDownloader:Win32/Broskod.A!bit?

TrojanDownloader:Win32/Broskod.A!bit removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X