Adrozek.692 removal instruction

The Adrozek.692 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Adrozek.692 virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Adrozek.692?


File Info:
crc32: 5914B7EB
md5: eacf04b0299482e332f4ced49d105e1a
name: EACF04B0299482E332F4CED49D105E1A.mlw
sha1: 08973fe3cd77ee18be2c8b14e41cc06c0b64ea2d
sha256: 6555e0aeeab584c18dd407de6b24cb36b88e1c4b252ea7b39ae7fa03d761395c
sha512: bb8320a767ce563efe57400fc525d6ed0704917850a1f251fe91ae8d6b1c2a59fab586edfb1587d96411d224c32e722c807552f4781306f9df7cf1649ec8b86a
ssdeep: 24576:jQBQ9pQbQ/DQFxQMZSXHQyPQeO329H0+e+y81Y9Lsw3BfYrDIuJFl6b4C126W:z1vBttoIy9xg/DJI4a
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: NCT Company Ltd. Copyright 1999 - 2003
InternalName: NCTAudioCompress2
FileVersion: 2,5,1,182
CompanyName: NCT Company Ltd.
LegalTrademarks: NCT Company Ltd.
ProductName: NCTAudioCompress2 Module
ProductVersion: 2,5,1,182
FileDescription: NCTAudioCompress2 ActiveX DLL
OriginalFilename: NCTAudioCompress2.DLL
Translation: 0x0409 0x04b0

Adrozek.692 also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0056252b1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen9.22670
ClamAV	Win.Packed.Adrozek-9811562-0
ALYac	Gen:Variant.Adrozek.692
Malwarebytes	Adware.DownloadAssistant
Zillya	Trojan.Kryptik.Win32.2588703
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (D)
Alibaba	Trojan:Win32/Staser.b748d0ba
K7GW	Trojan ( 0056252b1 )
Cybereason	malicious.029948
Cyren	W32/Agent.BXX.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HHUB
Zoner	Probably Heur.ExeHeaderH
APEX	Malicious
Avast	Win32:AdwareX-gen [Adw]
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Staser.gen
BitDefender	Gen:Variant.Adrozek.692
NANO-Antivirus	Trojan.Win32.Staser.iamkik
MicroWorld-eScan	Gen:Variant.Adrozek.692
Tencent	Win32.Trojan.Staser.Anpv
Ad-Aware	Gen:Variant.Adrozek.692
Comodo	Malware@#3bx9olk9ibib4
BitDefenderTheta	Gen:NN.ZexaF.34236.kv0@aOpVFUij
VIPRE	Trojan.Win32.Generic!BT
FireEye	Generic.mg.eacf04b0299482e3
Emsisoft	Gen:Variant.Adrozek.692 (B)
SentinelOne	Static AI – Malicious PE
Webroot	W32.Trojan.Gen
Avira	TR/Crypt.Agent.gbqam
Antiy-AVL	Trojan/Generic.ASMalwS.30F48B2
Microsoft	BrowserModifier:Win32/Adrozek
SUPERAntiSpyware	Trojan.Agent/Gen-Staser
GData	Gen:Variant.Adrozek.692
AhnLab-V3	PUP/Win32.ICLoader.R353041
Acronis	suspicious
VBA32	BScope.Trojan.CryptInject
MAX	malware (ai score=85)
Panda	Trj/GdSda.A
Rising	Trojan.Kryptik!1.AA23 (CLASSIC)
Ikarus	PUA.ICLoader
Fortinet	W32/CoinMiner.GYQC!tr
AVG	Win32:AdwareX-gen [Adw]
Paloalto	generic.ml

How to remove Adrozek.692?

Adrozek.692 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X