Trojan.Downloader.Perkesh.gen!A
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Popularity Rank: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Popularity Rank: | 20,564 |
| Threat Level: | 80 % (High) |
| Infected Computers: | 831 |
| First Seen: | December 7, 2010 |
| Last Seen: | July 9, 2026 |
| OS(es) Affected: | Windows |
The detection of Trojan.Downloader.Perkesh.gen!A indicates that your system has been compromised by a potentially malicious threat. This type of threat is categorized as a Trojan, which is a broad term for malware that disguises itself as legitimate software. The presence of this threat on your system can lead to a range of issues, from data theft to system instability. It is essential to understand the nature of this threat and take immediate action to remove it and prevent further damage.
Table of Contents
What Is Trojan.Downloader.Perkesh.gen!A?
Trojan.Downloader.Perkesh.gen!A is a type of malware that is designed to download and install additional malicious software onto your system. The "Trojan" part of its name refers to its ability to disguise itself as legitimate software, while "Downloader" indicates its primary function of downloading malware. The ".gen" suffix suggests that it is a generic detection, meaning that it is a category of malware rather than a specific instance. This type of threat can be particularly dangerous, as it can lead to a range of malicious activities, including data theft, system compromise, and further malware infections.
How Trojan.Downloader.Perkesh.gen!A Operates
Trojan.Downloader.Perkesh.gen!A operates by exploiting vulnerabilities in your system or tricking you into installing it. Once installed, it can download and install additional malware, which can include keyloggers, ransomware, and other types of malicious software. This threat can also communicate with its creators, allowing them to remotely control your system and steal sensitive information. The exact mechanisms used by Trojan.Downloader.Perkesh.gen!A can vary, but its primary goal is to compromise your system and steal your data.
Symptoms of Infection
The symptoms of a Trojan.Downloader.Perkesh.gen!A infection can vary, but common indicators include slow system performance, unexpected pop-ups or ads, and unfamiliar programs or icons on your desktop. You may also notice that your system is behaving erratically, or that your browser is being redirected to unfamiliar websites. In some cases, you may not notice any symptoms at all, which is why regular system scans and monitoring are essential for detecting and removing this type of threat.
How to Remove Trojan.Downloader.Perkesh.gen!A
- Boot your system in Safe Mode with Networking to prevent the malware from loading and to allow you to download and install removal tools.
- Perform a full scan of your system using a reputable anti-malware tool, such as SpyHunter, to detect and remove all instances of the malware.
- Uninstall any suspicious programs or applications that you do not recognize or that were installed around the time of the infection.
- Reset your web browsers, including Chrome, Firefox, and Edge, to their default settings to remove any malicious extensions or add-ons.
- Reboot your system and perform a follow-up scan to ensure that all instances of the malware have been removed.
Conclusion
The removal of Trojan.Downloader.Perkesh.gen!A requires immediate attention and a comprehensive approach to ensure that all instances of the malware are removed and that your system is protected against future infections. By following the steps outlined above and maintaining good system hygiene, including regular scans and updates, you can help to prevent this type of threat from compromising your system in the future. Remember to always be cautious when installing software or clicking on links, and to use reputable anti-malware tools to protect your system against the latest threats.
Aliases
15 security vendors flagged this file as malicious.
| Antivirus Vendor | Detection |
|---|---|
| TrendMicro | TROJ_GEN.R4FOCHL |
| TrendMicro | TROJ_GEN.RCBOCHR |
| Fortinet | W32/Perkesh.A!tr |
| AhnLab-V3 | Trojan/Win32.KillAV |
| TrendMicro | TROJ_GEN.FC2CKH4 |
| McAfee-GW-Edition | Heuristic.BehavesLike.Win32.Dropper.H |
| TrendMicro | TROJ_GEN.RCBOCBR |
| AntiVir | TR/Dldr.Geral.C |
| Kaspersky | Trojan-Downloader.Win32.LibPatcher.gt |
| CAT-QuickHeal | Trojan.Perkesh.A5 |
| BitDefender | Rootkit.10758 |
| Ikarus | Trojan-Dropper.Agent |
| AhnLab-V3 | Win-Trojan/Agent.314368.H |
| Antiy-AVL | Backdoor/Win32.Agent.gen |
| eTrust-Vet | Win32/KillAV.EW |
File System Details
| # | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|---|
| 1. | SmitfraudFix.exe | 13b1ec5ea6b9cfd157c7d7b6fe747b6f | 277 |
| 2. | mwssvc.exe | 62e0f3340a1d73e9d991f843b9d50e34 | 38 |
| 3. | nodqq.exe | 067bdf730e6bc18b7cde1caed59d8109 | 29 |
| 4. | dskclean.dll | 293982b3a48e1de363989d7faaa58010 | 8 |
| 5. | pxp113br.exe | d9c7c44313037475505cc4d839106889 | 5 |
| 6. | NsPass0.sys | 520942db4cd38a7084d4ebd4a462eb36 | 5 |
| 7. | w32time.dll | 3d86db4fd656ee129e1df7cd53e315d0 | 4 |
| 8. | SysLib.sys | e14e8d881bc8b0a4c7fde0e6f138a694 | 3 |
| 9. | Nskhelper2.sys | 10dac5e7c542b30d63cc07edc557690c | 3 |
| 10. | NsPass2.sys | 75b1b7dd8af48269f6a08bcb0cdd9f14 | 3 |
| 11. | NsPass4.sys | 9a6a3939d9c299d29bd9fe9ab90a7046 | 3 |
| 12. | autofmt2.exe | 5b34d96de3a38d46661d4b2a14eef7d7 | 2 |
| 13. | GrooveMonitor.exe | 21bdb8835860456d8cf3d1b9488ac2ef | 2 |
| 14. | Angel PDA.exe | c898efce7622b8908b777f0651f0288a | 2 |
| 15. | 007install-dep.exe | 3b4382f0b9041b832da722e891277f17 | 2 |
| 16. | appmgmts.dll | bf9be7003bc0d27675079ea9a0ae3aa6 | 2 |
| 17. | %TEMP%~box.tmp | 72ab071f11cb3d6dc8d0931860722c74 | 1 |
| 18. | schedsvc.dll | 068f1e1751d72b19baa49381edffd96d | 1 |
| 19. | srsvc.dll | 5701fcece55e142340f23a1db860d904 | 1 |
| 20. | wiaservc.dll | 8eeb7c714af78b36bb9c146d2ebc84cc | 1 |
| 21. | NsPass1.sys | 20ecba09ae92c87be5a70dcc4dedb895 | 1 |