Kazy.24338 malicious file

The Kazy.24338 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Kazy.24338 virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Network activity detected but not expressed in API logs

How to determine Kazy.24338?


File Info:
crc32: 8394A076
md5: 2cc78d22bc3981a8d52f52bb5602234c
name: 2CC78D22BC3981A8D52F52BB5602234C.mlw
sha1: 3cae8970f855c2ccf95e71694a925347217a7b97
sha256: a6ae20149fdf81c0d60af64d45d542044600efb4e0f4c68b0e5bbd208683a6c7
sha512: d9d673e0de94ca0dbd1b5281e7facc3270dd3bf29d7480de3a6763be87cb48685734f9b1441c57725ed1ea21f7037ce68cad6454fdf7338558158c16b08d10aa
ssdeep: 768:w9y8PsETz8sammTzBlXLaDTjlPqhHWs0LH1Z:pO5ssH8rXhKV
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: Copyright xa9 Ujekuxip Software 1995-2009
EOGN6jwC: hhUXxlt
InternalName: Ujekuxip
EWaUk: EYGcuNF
FileVersion: 746
CompanyName: TJ SOFTWIN JS
hriJYB8j: xWfV6kGI7
BVsGB3x: xnNSJWPkHC
jfXMOmhSN: epM5lKAca
ProductName: Ujekuxip
Sc6V8RIiU: IFSeyo
ProductVersion: 7.4
d6lyN6Af1Y: ap5rJVc
FileDescription: Ujekuxip Mqqfkajfs Ictxlksl
bW17k6: 6jWmE2V
DuNrjdo7UP: FBkDde6
OriginalFilename: IS.exe
xSdtgg2rQu: ox8iM
Translation: 0x0409 0x04b0

Kazy.24338 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( f1000f011 )
MicroWorld-eScan	Gen:Variant.Kazy.24338
ALYac	Gen:Variant.Kazy.24338
Zillya	Trojan.Zbot.Win32.1108
CrowdStrike	win/malicious_confidence_60% (D)
BitDefender	Gen:Variant.Kazy.24338
K7GW	Trojan ( f1000f011 )
Cybereason	malicious.2bc398
Cyren	W32/Shiz.C.gen!Eldorado
Symantec	Trojan.Ransomlock!gen4
APEX	Malicious
Paloalto	generic.ml
Alibaba	Ransom:Win32/Obfuscator.a1aee280
NANO-Antivirus	Trojan.Win32.Winlock.dfylw
ViRobot	Trojan.Win32.A.PornoAsset.27136.G[UPX]
SUPERAntiSpyware	Trojan.Agent/Gen-Falint
Ad-Aware	Gen:Variant.Kazy.24338
Sophos	ML/PE-A + Mal/EncPk-AAY
Comodo	Malware@#2t56whlobi6mq
BitDefenderTheta	Gen:NN.ZexaF.34722.bmKfaOjYa3ji
VIPRE	Trojan.Win32.Zbot.xmp (v)
McAfee-GW-Edition	W32/Pinkslipbot.gen.as
FireEye	Generic.mg.2cc78d22bc3981a8
Emsisoft	Gen:Variant.Kazy.24338 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/PornoAsset.lp
Webroot	w32.malware.gen
Avira	TR/Crypt.EPACK.Gen2
eGambit	Generic.Malware
Antiy-AVL	Trojan/Generic.ASMalwS.3C8AF3
Kingsoft	Win32.Troj.Generic.a.(kcloud)
AegisLab	Trojan.Win32.PornoAsset.j!c
GData	Gen:Variant.Kazy.24338
VBA32	Hoax.PornoAsset
MAX	malware (ai score=100)
Tencent	Win32.Virus.Lockscreen.Huzv
Yandex	Trojan.PornoAsset!e+3jrs6hDyY
Ikarus	Trojan-Ransom.PornoAsset
Fortinet	W32/Bamital.FA!tr
Panda	Generic Malware

How to remove Kazy.24338?

Kazy.24338 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X