Categories: Malware

How to remove “Kazy.124728”?

The Kazy.124728 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Kazy.124728 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Kazy.124728?


File Info:
crc32: 08BC62E2md5: 00814e144acfa0aedffa4ba20ba25961name: cadv2.5.55you.com.exesha1: 72c86ec52ff69a9c8e55ab969a09af2869eff53csha256: b5f23a8d651259d4cf592cf2202dffd41d586cc1a5817fd73b794f66db27ca06sha512: f25ea2a77c569abe2103fb6dfaf5862acf192291b7712eef3d1ce5985dc8690f64fe3344da0f914610834c868aa731bafc8f4f28fd7bbc19ca84c87f05b4724assdeep: 49152:UCwNnXNqHCoiohsGBN2j3WNey70piuqx+tQzNTJnRVG8KisRyDa:UCSndqHCo3hr63Yey4piXnNNRVQ8atype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright: x5c0fx9f99x8f6fx4ef6x5de5x4f5cx5ba4x7248x6743x6240x6709FileVersion: 1.1.0.0CompanyName: x5c0fx9f99x8f6fx4ef6x5de5x4f5cx5ba4(QQ:583371958)Comments: CADx6740x6bd2x8f6fx4ef6x5b89x88c5x7a0bx5e8fProductName: CADx6740x6bd2x8f6fx4ef6x5b89x88c5x7a0bx5e8fProductVersion: 1.1.0.0FileDescription: CADx6740x6bd2x8f6fx4ef6x5b89x88c5x7a0bx5e8fTranslation: 0x0804 0x04b0

Kazy.124728 also known as:

MicroWorld-eScan	Gen:Variant.Kazy.124728
FireEye	Generic.mg.00814e144acfa0ae
McAfee	Artemis!00814E144ACF
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Variant.Kazy.124728
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.44acfa
TrendMicro	TROJ_SPNR.38HQ13
F-Prot	W32/Trojan.CLL.gen!Eldorado
Symantec	Trojan.Gen
APEX	Malicious
ClamAV	Win.Adware.Agent-1294915
GData	Gen:Variant.Kazy.124728
Alibaba	Trojan:Application/Generic.0525ccc0
NANO-Antivirus	Trojan.Win32.TrjGen.cudtzt
AegisLab	Trojan.Win32.Kazy.4!c
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Spnr.Dav
Endgame	malicious (moderate confidence)
Sophos	Generic PUA HC (PUA)
Comodo	Malware@#2wsakfykx0ice
DrWeb	Trojan.Click2.64462
Zillya	Trojan.Genome.Win32.214756
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Flyagent.tc
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Kazy.124728 (B)
Ikarus	Trojan.Win32.Sasfis
Cyren	W32/Trojan.CLL.gen!Eldorado
Jiangmin	TrojanDropper.Flystud.bi
Webroot	W32.Malware.Gen
eGambit	Unsafe.AI_Score_100%
Antiy-AVL	Trojan/Win32.Genome
Microsoft	Trojan:Win32/Occamy.C
Arcabit	Trojan.Kazy.D1E738
SUPERAntiSpyware	Trojan.Agent/Gen-Genome
Acronis	suspicious
VBA32	Trojan.Genome.ai
MAX	malware (ai score=99)
Ad-Aware	Gen:Variant.Kazy.124728
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
TrendMicro-HouseCall	TROJ_SPNR.38HQ13
Rising	Trojan.Win32.Generic.14501E91 (C64:YzY0Oh/Va8xEY+bO)
Yandex	Rootkit.Agent!VjquwSXHwRQ
SentinelOne	DFI – Malicious PE
MaxSecure	Trojan.Malware.4945242.susgen
Fortinet	W32/Genome.AIWUL!tr
BitDefenderTheta	Gen:NN.ZexaF.34098.4nKfamXjDagb
AVG	Win32:Malware-gen
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_90% (W)