Trojan

What is “Trojan:Win32/Tovkater.A”?

Malware Removal

The Trojan:Win32/Tovkater.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Tovkater.A virus can do?

  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • Behavior consistent with a dropper attempting to download the next stage.
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
midnigntstranger.top
backverge.top

How to determine Trojan:Win32/Tovkater.A?


File Info:

crc32: F06102CB
md5: e033f0c2818c7acda47d3a7e2a1a0b92
name: E033F0C2818C7ACDA47D3A7E2A1A0B92.mlw
sha1: 4d17988bbd959c96584f34b565faa8d14a1c7e35
sha256: 266ab5bae7c831554601c9d9542ecb55531380436254aab37c84f714b4f40f11
sha512: 74ee420f17830e44a5a0e00b434378e5e7ad92022ba4aa118762ed1240c7568540d0f4fcef926aa18b06431ec12ece66121089cb44ea02b3c024effa530b7756
ssdeep: 24576:ZaozQ8gAOSWlhyLjA7d0OJj2/97/9nLJiyqC+CAkCox97Y4crflhi79wVkuJwS:iNSeYY7SOJjuD8yq77kX/rI9k7KVkuGS
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

Trojan:Win32/Tovkater.A also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 0051918e1 )
LionicTrojan.Multi.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.InstallMonster.2550
CynetMalicious (score: 100)
ALYacTrojan.GenericKD.46479843
CylanceUnsafe
ZillyaAdware.DLBoost.Win32.3411
SangforTrojan.Win32.GenericML.xnet
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 0051918e1 )
Cybereasonmalicious.2818c7
CyrenW32/Tovkater.W.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32multiple detections
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Dropper.Tovkater-6646893-0
KasperskyTrojan-Downloader.Win32.Tovkater.cskq
BitDefenderTrojan.GenericKD.46479843
NANO-AntivirusTrojan.Win32.InstallMonster.exlcxj
MicroWorld-eScanTrojan.GenericKD.46479843
TencentWin32.Trojan-downloader.Tovkater.Agkh
Ad-AwareTrojan.GenericKD.46479843
SophosMal/Generic-S
ComodoTrojWare.Win32.TrojanDownloader.Tovkater.GC@7jimpe
BitDefenderThetaGen:NN.ZexaF.34236.toJfa4gYg7f
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.ICLoader.tc
FireEyeGeneric.mg.e033f0c2818c7acd
EmsisoftTrojan.GenericKD.46479843 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1117983
Antiy-AVLTrojan/Generic.ASMalwS.252C9B6
MicrosoftTrojan:Win32/Tovkater.A
ArcabitTrojan.Generic.D2C539E3
ZoneAlarmTrojan-Downloader.Win32.Tovkater.cskq
GDataNSIS.Trojan-Downloader.Tovkater.D
AhnLab-V3Downloader/Win32.Tovkater.R215698
Acronissuspicious
McAfeeArtemis!E033F0C2818C
MAXmalware (ai score=89)
VBA32Trojan.Wacatac
PandaTrj/CI.A
YandexTrojan.Agent!U0w9SO6wpIc
IkarusTrojan-Downloader.Win32.Tovkater
FortinetW32/Tovkater.IA!tr.dldr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan:Win32/Tovkater.A?

Trojan:Win32/Tovkater.A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment