Malware

About “Downloader.Kuzitui” infection

Malware Removal

The Downloader.Kuzitui is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Downloader.Kuzitui virus can do?

  • Presents an Authenticode digital signature
  • A process created a hidden window
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)

Related domains:

i.kpzip.com

How to determine Downloader.Kuzitui?


File Info:

crc32: A71F5EE1
md5: 3760a883936565b7e7ba0a0699bb7904
name: mininews-9.exe
sha1: 96c69372211129c8e258a5d563e28655c1fb4561
sha256: 12964cbe7b231ae01ccb39eafda2380de5c2f220eab09967c8fa952b95e33b2b
sha512: c55515f485d493680d0e41912c748cafa641fd8926f5851921f213fb2b906b2d06709671686117a43d131d0164e0f446a74a309cec7a178eb7400bdc7e6b7fb8
ssdeep: 24576:aZ3eBTMOYqcMivYaYr7bhv/5ktYKKhZaHeS0+7KMSP+QOneGVwnvga7M27BmREd:NVx6q+7KdPsnVFyNBmRE1AmvaFCsWj
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: x4e0ax6d77x5e7fx4e50x7f51x7edcx79d1x6280x6709x9650x516cx53f8
InternalName: mininews
FileVersion: 4.1.7.6
ProductName: x8ff7x4f60x65b0x95fb
ProductVersion: 4.1.7.6
FileDescription: x8ff7x4f60x65b0x95fb
OriginalFilename: x8ff7x4f60x65b0x95fb
Translation: 0x0804 0x04b0

Downloader.Kuzitui also known as:

BkavW32.HfsAdware.C51A
MicroWorld-eScanAdware.GenericKD.6255354
CAT-QuickHealDownloader.Kuzitui
McAfeeAdware-KZip
VIPRETrojan.Win32.Generic!BT
K7GWAdware ( 004f7e1c1 )
K7AntiVirusAdware ( 004f7e1c1 )
ArcabitAdware.Generic.D5F72FA
Invinceaheuristic
CyrenW32/Trojan.OCNZ-7268
SymantecSecurityRisk.gen1
TrendMicro-HouseCallTROJ_GEN.R00EC0PK417
AvastWin32:Malware-gen
Kasperskynot-a-virus:HEUR:Downloader.Win32.KuziTui.gen
BitDefenderAdware.GenericKD.6255354
ViRobotAdware.Kuaizip.2393552.A
Endgamemalicious (high confidence)
EmsisoftAdware.GenericKD.6255354 (B)
F-SecureAdware.GenericKD.6255354
TrendMicroTROJ_GEN.R00EC0PK417
McAfee-GW-EditionAdware-KZip
SophosGeneric PUA JG (PUA)
JiangminDownloader.KuziTui.ac
Antiy-AVLRiskWare[Downloader]/Win32.KuziTui
ZoneAlarmnot-a-virus:HEUR:Downloader.Win32.KuziTui.gen
GDataWin32.Application.KuaiZip.B
ALYacAdware.GenericKD.6255354
AVwareTrojan.Win32.Generic!BT
MAXmalware (ai score=99)
PandaTrj/CI.A
ESET-NOD32a variant of Win32/KuaiZip.B potentially unwanted
YandexPUA.Downloader!
FortinetRiskware/KuaiZip
Ad-AwareAdware.GenericKD.6255354
AVGWin32:Malware-gen
CrowdStrikemalicious_confidence_100% (D)

How to remove Downloader.Kuzitui?

Downloader.Kuzitui removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment