Categories: Malware

How to remove “Kazy.21282”?

The Kazy.21282 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Kazy.21282 virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
Unconventionial language used in binary resources: Icelandic
The binary likely contains encrypted or compressed data.
Tries to unhook or modify Windows functions monitored by Cuckoo
Network activity detected but not expressed in API logs
Collects information to fingerprint the system
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Kazy.21282?


File Info:
crc32: 18ED2436md5: 98e3fea82bd1285db0737a31f1a2c02aname: 98E3FEA82BD1285DB0737A31F1A2C02A.mlwsha1: 042791cb65547f81ee60357b8c517883d24e1640sha256: 1a5c5507c9297a2b8d78775e98120816cde021b0fe0f64b06db144e8fff5c9f6sha512: 3ee1aada608178f900cc4ac83f34d690dfc8237110d3ec276eafb1faded605cfa2fc0293f3b3259bed5630cfccd8ed049cf897285b733936be2f6007a7c2bc8essdeep: 3072:QSGLEdN3CIPZJEJRncxYqhg05NOiKf7pX/Bb9:QSN3nhJE7rOg+k7pX5type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
InternalName: QWolFileVersion: 113.174.221.172CompanyName: MQAF8IOTOProductName: QFMBProductVersion: 113.174.221.172FileDescription: zAL0TpcswP4cOriginalFilename: YvdlHTranslation: 0x0409 0x04b0

Kazy.21282 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Backdoor ( 005328fd1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen4.9007
ClamAV	Win.Trojan.Mbro-181
McAfee	Generic BackDoor.aaj
Cylance	Unsafe
Zillya	Trojan.Kryptik.Win32.259289
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
K7GW	Backdoor ( 005328fd1 )
Cybereason	malicious.82bd12
Cyren	W32/Carberp.B.gen!Eldorado
Symantec	Trojan.Gen
ESET-NOD32	a variant of Win32/Kryptik.AHQH
APEX	Malicious
Avast	Win32:MalOb-HX [Cryp]
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Kazy.21282
NANO-Antivirus	Trojan.Win32.Mbro.vquqd
MicroWorld-eScan	Gen:Variant.Kazy.21282
Tencent	Malware.Win32.Gencirc.114c1564
Ad-Aware	Gen:Variant.Kazy.21282
Sophos	ML/PE-A + Mal/EncPk-AFC
Comodo	MalCrypt.Indus!@1qrzi1
BitDefenderTheta	Gen:NN.ZexaF.34236.iu0@aSzm7EnG
VIPRE	Trojan.Win32.Encpk.ady (v)
McAfee-GW-Edition	Generic BackDoor.aaj
FireEye	Generic.mg.98e3fea82bd1285d
Emsisoft	Gen:Variant.Kazy.21282 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/MBro.afv
Webroot	W32.Trojan.Gen
Avira	TR/Crypt.ZPACK.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.890B1
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Skeeyah.A!rfn
GData	Gen:Variant.Kazy.21282
TACHYON	Trojan/W32.Mbro.138240
AhnLab-V3	Win-Trojan/Malpacked6.Gen
Acronis	suspicious
VBA32	OScope.Trojan.Hlux.01733
MAX	malware (ai score=83)
Panda	Trj/Mystic.b
Rising	Trojan.Generic@ML.100 (RDML:LYFX+MTEhauTgbxF3JyBpg)
Yandex	Trojan.Mbro!j1EVxjwSJ4Q
Ikarus	Trojan-Spy.Win32.Carberp
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Kryptik.XUW!tr
AVG	Win32:MalOb-HX [Cryp]