TrojanDownloader:Win32/Tinrepo.A removal tips

The TrojanDownloader:Win32/Tinrepo.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What TrojanDownloader:Win32/Tinrepo.A virus can do?

Sample contains Overlay data
Unconventionial language used in binary resources: Korean
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine TrojanDownloader:Win32/Tinrepo.A?


File Info:
name: F02FD9D298BC88EB7CB7.mlw
path: /opt/CAPEv2/storage/binaries/17509302f0a6162e815eb0da1fcbec00064089966ffea6f7e036b7421dc52233
crc32: 5AEAA1CA
md5: f02fd9d298bc88eb7cb77aed799bc45b
sha1: f67ed16b4ed1cdceb835ce5bc4a35f297ba60f6e
sha256: 17509302f0a6162e815eb0da1fcbec00064089966ffea6f7e036b7421dc52233
sha512: 050c23ac99d1ac29848050081cac30c99b4f3b5655ad6c4d3218453887d4a5f24e2379bb908134bd7d2ca6f180328fc1bb13fbf7543ac0a45deabceadcdbc6b4
ssdeep: 12288:NjL35Ps1gnRq0TldOqWNp3s3K0U+DQ50sbOVoT:NjD5ZnRq07xmp83FUw8X
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EBF46D32B2B18437D5635E39CC2BD259582ABF502E28B94A3BFD3D4C8F3978129152D7
sha3_384: 171df8b3b774bbaf2154caaf16ab4d4e992dc27dfb23dbb48675db6cf9a105bfd5e032a32cb4717c1858e5e0f1091cb6
ep_bytes: 558becb90e0000006a006a004975f953
timestamp: 1992-06-19 22:22:17

Version Info:
CompanyName: repoint.co.kr
FileDescription: point save
FileVersion: 1.0.0.1
InternalName: 
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: 
ProductName: 
ProductVersion: 1.0.0.0
Comments: 
Translation: 0x0412 0x03b5

TrojanDownloader:Win32/Tinrepo.A also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Agent.8!c
AVG	Win32:Agent-AAFO [Trj]
FireEye	Generic.mg.f02fd9d298bc88eb
Skyhigh	BehavesLike.Win32.Generic.bh
McAfee	GenericRXSQ-IS!F02FD9D298BC
Malwarebytes	WebAlta.Adware.ToolBar.DDS
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 7000000f1 )
Alibaba	TrojanDownloader:Win32/Tinrepo.52562fc4
K7GW	Trojan ( 7000000f1 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZelphiF.36802.VG1@auq8NJoG
Symantec	Downloader
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Trojan.Clicker-3936
Kaspersky	HEUR:Trojan-Dropper.Win32.Sysn.gen
NANO-Antivirus	Trojan.Win32.Agent.paoa
Avast	Win32:Agent-AAFO [Trj]
F-Secure	Trojan.TR/Agent.800769
DrWeb	BackDoor.RFM.17
Zillya	Trojan.Agent.Win32.71762
TrendMicro	TROJ_CLICKER.AFN
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Jiangmin	Adware/Clicker.grg
Varist	W32/Trojan.MQQP-7700
Avira	TR/Agent.800769
MAX	malware (ai score=100)
Antiy-AVL	Trojan[Clicker]/Win32.Agent
Kingsoft	Win32.Troj.Unknown.a
Microsoft	TrojanDownloader:Win32/Tinrepo.A
Xcitium	Malware@#140ocpip2gbim
ViRobot	Trojan.Win32.Clicker.744448.B
ZoneAlarm	HEUR:Trojan-Dropper.Win32.Sysn.gen
Google	Detected
Cylance	unsafe
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_CLICKER.AFN
Rising	Downloader.Tinrepo!8.A98E (TFE:4:1yPo77Fwov)
Yandex	Trojan.CL.Agent!PN+1X/9A1aI
Ikarus	Trojan.Win32.Ozopige
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.XZ!tr
DeepInstinct	MALICIOUS
alibabacloud	Suspicious

How to remove TrojanDownloader:Win32/Tinrepo.A?

TrojanDownloader:Win32/Tinrepo.A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X