Trojan:Win32/Itagomoko removal

The Trojan:Win32/Itagomoko is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Itagomoko virus can do?

How to determine Trojan:Win32/Itagomoko?


File Info:
crc32: 53EDD465
md5: ac0c3c4e242654789d3b4d69a69fb75e
name: 1433.exe
sha1: 7855ad2f27a626e24f7c06644838a90f60cecdad
sha256: 97239eb8d27c2fe6cbea411457b3b69f65f4fa4faf8ce9e6016b890acd08efb8
sha512: 8515226063fb3e4b00f09d6906453aa4b9a9f4ae8542dbb6d11b3c8edbf13463a8acb93d76d9c57905463a8e4600ac92d6b3c448163789dac9c2b1859eb3d102
ssdeep: 768:JzlaN7dGuGnV6BKFrtY9nLsQyQXwuZDpUPG9:Jz/uGnV6BKRtunIoAuZ0O
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: SAGA Incorporated, Copyright (C) 1998
InternalName: DSplit
FileVersion: 1, 0, 0, 1
CompanyName: 
ProductName: Dynamic splitter (demo)
ProductVersion: 1, 0, 0, 1
FileDescription: Dynamic splitter (demo)
OriginalFilename: DSplit.EXE
Translation: 0x0409 0x04b0

Trojan:Win32/Itagomoko also known as:

Bkav	W32.TirisomyASG.Trojan
MicroWorld-eScan	Trojan.GenericKD.30849707
FireEye	Generic.mg.ac0c3c4e24265478
CAT-QuickHeal	Trojan.Redosdru.19849
ALYac	Trojan.GenericKD.30849707
Cylance	Unsafe
VIPRE	LooksLike.Win32.Uruasy.b!ag (v)
CrowdStrike	win/malicious_confidence_100% (W)
BitDefender	Trojan.GenericKD.30849707
K7GW	Trojan-Downloader ( 004df2461 )
K7AntiVirus	Trojan-Downloader ( 004df2461 )
TrendMicro	BKDR_ZEGOST.SM17
BitDefenderTheta	AI:Packer.74FDDBE321
Cyren	W32/Trojan.IM.gen!Eldorado
Symantec	Downloader!gm
Baidu	Win32.Trojan-Downloader.Agent.jm
APEX	Malicious
Avast	Win32:Trojan-gen
ClamAV	Win.Downloader.Farfli-6453698-0
GData	Trojan.GenericKD.30849707
Kaspersky	Backdoor.Win32.Farfli.adnj
Alibaba	Backdoor:Win32/Farfli.5af9b8e8
NANO-Antivirus	Trojan.Win32.Agent.dzjfom
AegisLab	Trojan.Win32.Farfli.toDL
Tencent	Malware.Win32.Gencirc.10b0cde3
Ad-Aware	Trojan.GenericKD.30849707
Sophos	Troj/AutoG-FE
Comodo	Backdoor.Win32.Beaugrit.C@6l4u2b
F-Secure	Heuristic.HEUR/AGEN.1003911
DrWeb	Trojan.DownLoader18.59296
Zillya	Backdoor.Farfli.Win32.9436
Invincea	heuristic
McAfee-GW-Edition	Trojan-FIOM!AC0C3C4E2426
Emsisoft	Trojan.GenericKD.30849707 (B)
Ikarus	Trojan-Downloader.Win32.Agent
F-Prot	W32/Trojan.IM.gen!Eldorado
Jiangmin	Backdoor.Farfli.asi
MaxSecure	Trojan.Malware.8973988.susgen
Avira	HEUR/AGEN.1003911
MAX	malware (ai score=84)
Antiy-AVL	Trojan[Backdoor]/Win32.AGeneric
Endgame	malicious (high confidence)
Arcabit	Trojan.Generic.D1D6BAAB
SUPERAntiSpyware	Trojan.Agent/Gen-Downloader
ZoneAlarm	Backdoor.Win32.Farfli.adnj
Microsoft	Trojan:Win32/Itagomoko
AhnLab-V3	Trojan/Win32.Itagomoko.C1402388
Acronis	suspicious
McAfee	Trojan-FIOM!AC0C3C4E2426
TACHYON	Backdoor/W32.Farfli.73728.E
VBA32	BScope.TrojanDownloader.Farfli
Panda	Trj/Genetic.gen
Zoner	Trojan.Win32.83819
ESET-NOD32	Win32/TrojanDownloader.Agent.BZI
TrendMicro-HouseCall	BKDR_ZEGOST.SM17
Rising	Backdoor.Farfli!8.B4 (CLOUD)
Yandex	Backdoor.Farfli!vzhjsKPJQGU
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Agent.BOZ!tr
Webroot	W32.Trojan.Gen
AVG	Win32:Trojan-gen
Paloalto	generic.ml
Qihoo-360	Win32/Backdoor.Netsyst.A

How to remove Trojan:Win32/Itagomoko?

Trojan:Win32/Itagomoko removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X