Win32/Spy.Banker.AATL removal

The Win32/Spy.Banker.AATL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Spy.Banker.AATL virus can do?

Reads data out of its own binary image
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Spy.Banker.AATL?


File Info:
crc32: BD47686F
md5: 10dc2afe3cdd24b56c85e79847e65746
name: 10DC2AFE3CDD24B56C85E79847E65746.mlw
sha1: cbb562c26e7e2f139a4ce9da6a3c7d4a11f0afd6
sha256: 1dfe8feadadd333703591d1c1580dedf6edbc92796d26dd2b911d4e95b11dea6
sha512: f266c87662cd0c71b9246ef97fbe57276d8d242a4c80be4f4806362db340577798a197e2a14d1c66cbb763ec05a66a5e1836f2631ab40d983cf1ee9a0506051f
ssdeep: 12288:ehkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcE4aC0:uRmJkcoQricOIQxiZY1iaC0
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1
FileVersion: 3, 3, 8, 1
FileDescription: 
Translation: 0x0809 0x04b0

Win32/Spy.Banker.AATL also known as:

K7AntiVirus	Trojan ( 700000111 )
Lionic	Trojan.Win32.Generic.4!c
DrWeb	BackDoor.IRC.Bot.3194
Cynet	Malicious (score: 100)
K7GW	Trojan ( 700000111 )
Cybereason	malicious.26e7e2
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/Spy.Banker.AATL
APEX	Malicious
Avast	AutoIt:Agent-AGO [Trj]
ClamAV	Win.Trojan.Agent-6603675-0
NANO-Antivirus	Trojan.Win32.Bot.ffclqz
Tencent	Autoit.Trojan.Dropper.Dxxc
Sophos	Mal/Generic-S
Comodo	Malware@#3rjrp4x3yan62
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Yahlover.jh
Avira	TR/AutoIt.RG.1280
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Malware/Win32.Generic.C2591169
McAfee	Artemis!10DC2AFE3CDD
Ikarus	Trojan-Banker.Win32.Banbra
MaxSecure	Trojan.Autoit.AZA
AVG	AutoIt:Agent-AGO [Trj]
Paloalto	generic.ml

How to remove Win32/Spy.Banker.AATL?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Spy.Banker.AATL removal