Trojan:Win32/Tnega.PKAA!MTB removal tips

The Trojan:Win32/Tnega.PKAA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Tnega.PKAA!MTB virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan:Win32/Tnega.PKAA!MTB?


File Info:
crc32: 054070D6
md5: f688c1137c695cff7db9c2fbba4565bc
name: F688C1137C695CFF7DB9C2FBBA4565BC.mlw
sha1: 6168c67ca2d296fb145a5b1629a407c1be2a2f18
sha256: 4280f1b7559ffa6cd3449e060e3f7da242bb1296cd618697ffe6d33306916298
sha512: d4d33beab360cf404eb3ca38f3766317a244c14f56ed686f3d1dd7c276789e719a7190ccd1b30a189d1c811e0b7a53d7e59052a92f9777805f79a2525bfa637c
ssdeep: 1536:tADB6HWvpuzdq0ycwvQg97gaL/3xb8fwQCEIZ45pgPNLkbbEDB:tA1Fv+NSEsBb8f1CE3pgPNL4bE1
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: Converter.com
InternalName: Diskontinuertes
FileVersion: 4.00
CompanyName: Converter.com
LegalTrademarks: Converter.com
Comments: Converter.com
ProductName: Converter.com
ProductVersion: 4.00
FileDescription: Converter.com
OriginalFilename: Diskontinuertes.exe

Trojan:Win32/Tnega.PKAA!MTB also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.PackedENT.232
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.47316920
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanDownloader:Win32/GuLoader.3a1ebdcb
Cyren	W32/VBKrypt.BCL.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.EQLB
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	Trojan-Downloader.Win32.GuLoader.jc
BitDefender	Trojan.GenericKD.47316920
MicroWorld-eScan	Trojan.GenericKD.47316920
Ad-Aware	Trojan.GenericKD.47316920
Sophos	Mal/Generic-R + Troj/Zbot-POJ
BitDefenderTheta	Gen:NN.ZevbaF.34266.fm0@a8xelhki
McAfee-GW-Edition	RDN/Generic.com
FireEye	Generic.mg.f688c1137c695cff
Emsisoft	Trojan.GenericKD.47316920 (B)
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Tnega.PKAA!MTB
GData	Win32.Trojan.Agent.HZG5XJ
AhnLab-V3	Trojan/Win.Tnega.R448622
McAfee	RDN/Generic.com
MAX	malware (ai score=88)
VBA32	BScope.TrojanDownloader.GuLoader
Panda	Trj/RnkBend.A
Ikarus	Trojan.VB.Crypt
Fortinet	Malicious_Behavior.SB
AVG	Win32:Trojan-gen
Paloalto	generic.ml

How to remove Trojan:Win32/Tnega.PKAA!MTB?

Trojan:Win32/Tnega.PKAA!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X