Trojan:Win32/Konny.A removal tips

The Trojan:Win32/Konny.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Konny.A virus can do?

Authenticode signature is invalid
Touches a file containing cookies, possibly for information gathering

How to determine Trojan:Win32/Konny.A?


File Info:
name: 1B8E28FC2CADA4020014.mlw
path: /opt/CAPEv2/storage/binaries/44150350727e2a42f66d50015e98de462d362af8a9ae33d1f5124f1703179ab9
crc32: 7A91D3C3
md5: 1b8e28fc2cada4020014c7df2318da8f
sha1: 3e09c842e8ff41341787f94ce20ce2c5168a1bdf
sha256: 44150350727e2a42f66d50015e98de462d362af8a9ae33d1f5124f1703179ab9
sha512: 3f3fe2e09c75a2d63907b92949c91665e7d4bea01962343b6a330be9c9839867ab6c595b9dbc4310eb47ceb414f3c5f95b2433be5a36a9a3bafe9cc8359b5376
ssdeep: 1536:NpnOXIxRi3PxMNNXF7tyTved++V4CXuNkEZDUtpP8aJ:NpnLxR3N5vY+V4CXu/ZDUtpEaJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T167837D117291D032D066143448BDC7B28B3E7C325BB9D5877BA40B7F6F712C29A3A76A
sha3_384: 439307e3a965ca5016dff7df93bf1c8c9617f3b9bac12548ccd6ff1e259acec1e4ada77e930f5ca226b2e0399f47500b
ep_bytes: e8874e0000e989feffff8bff558bec51
timestamp: 2014-09-02 13:06:58

Version Info:
Comments: Microsoft Corporation
CompanyName: Microsoft@ Windows@ Corporation
FileDescription: Host Process for Windows Services
FileVersion: 6.2.9200.16834
InternalName: svchost
LegalCopyright: Copyright ¨Ï 2003
OriginalFilename: svchost
ProductName: Microsoft@Windows@Operate System
ProductVersion: 6.2.9200.16834
Translation: 0x0409 0x04b0

Trojan:Win32/Konny.A also known as:

Bkav	W32.Common.32CD9F99
Lionic	Trojan.Win32.Sysn.b!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.257697
FireEye	Generic.mg.1b8e28fc2cada402
Skyhigh	BehavesLike.Win32.Generic.lh
McAfee	GenericRXCE-TY!1B8E28FC2CAD
Cylance	unsafe
Zillya	Trojan.Virkonni.Win32.16
Sangfor	Spyware.Win32.Virkonni.Vcpc
K7AntiVirus	Trojan ( 0050cc831 )
Alibaba	TrojanDropper:Win32/Konny.607faac0
K7GW	Trojan ( 0050cc831 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Zusy.D3EEA1
BitDefenderTheta	Gen:NN.ZexaF.36744.eu0@aW8m6dci
Symantec	Backdoor.Noknef!gm
ESET-NOD32	Win32/Spy.Virkonni.I
Cynet	Malicious (score: 100)
APEX	Malicious
Kaspersky	Trojan-Dropper.Win32.Sysn.apil
BitDefender	Gen:Variant.Zusy.257697
NANO-Antivirus	Trojan.Win32.Agent.eojdqb
Avast	Win32:Malware-gen
Tencent	Win32.Trojan-Dropper.Sysn.Ymhl
TACHYON	Trojan/W32.Agent.81408.ACA
Emsisoft	Gen:Variant.Zusy.257697 (B)
F-Secure	Trojan.TR/Agent.81408.121
VIPRE	Gen:Variant.Zusy.257697
TrendMicro	TSPY_KONNI.A
Trapmine	suspicious.low.ml.score
Sophos	Mal/Generic-S
Jiangmin	TrojanDropper.Sysn.fbk
Webroot	W32.Trojan.Gen
Avira	TR/Agent.81408.121
Antiy-AVL	Trojan[Dropper]/Win32.Konni
Kingsoft	malware.kb.a.798
Xcitium	TrojWare.Win32.Injector.ABIP@4tvfsw
Microsoft	Trojan:Win32/Konny.A
ViRobot	Trojan.Win32.Z.Agent.81408.QC
ZoneAlarm	Trojan-Dropper.Win32.Sysn.apil
GData	Gen:Variant.Zusy.257697
Google	Detected
AhnLab-V3	Trojan/Win32.HDC.C673227
VBA32	suspected of Trojan.Notifier.gen
ALYac	Backdoor.Noknef
MAX	malware (ai score=100)
Malwarebytes	Malware.AI.3800555667
Panda	Trj/CI.A
TrendMicro-HouseCall	TSPY_KONNI.A
Rising	Spyware.Virkonni!8.107B2 (CLOUD)
Yandex	Trojan.DR.Sysn!UKa67epdL+c
Ikarus	Trojan.Win32.Agent
MaxSecure	Trojan.Malware.1728101.susgen
Fortinet	W32/Virkonni.I!tr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Trojan:Win32/Konny.A?

Trojan:Win32/Konny.A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X