Malware

Kazy.28960 removal

Malware Removal

The Kazy.28960 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Kazy.28960 virus can do?

  • Executable code extraction
  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics
  • Attempts to modify Explorer settings to prevent hidden files from being displayed

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Kazy.28960?


File Info:

crc32: A7BB2D54
md5: e53b16752025e78f79297983b2d01af2
name: E53B16752025E78F79297983B2D01AF2.mlw
sha1: d1f18d4a0369c0147772611a20d2bc8b321354b9
sha256: 5d7d782448a080b304eeb3d244e8db3b94f75730c6d8465cdecbebe56abfe4ee
sha512: 629742ee004e281a9e8442a6907c98d2dc2e7b45cd74c319e4ced10d8a1b95e2e978de6a831a65ca5fa41feda2d0bc4bcfafdbeac89c77a262bee187eca79daf
ssdeep: 3072:uVMKsWKxlGxE07ABigCFHdLYyBvzyBHNGqXgvnHZyzi0zslLFU/FzKsR:a3sWKxQ52CFHdLYKvzyZNGX/IupI2s
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
ProductVersion: 1.00
InternalName: DOCUMENT
FileVersion: 1.00
OriginalFilename: DOCUMENT.exe
ProductName: Project1

Kazy.28960 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusP2PWorm ( 004bad931 )
Elasticmalicious (high confidence)
DrWebTrojan.Siggen6.19362
CynetMalicious (score: 100)
CAT-QuickHealWorm.Copali.OD3
ALYacGen:Variant.Kazy.28960
CylanceUnsafe
CrowdStrikewin/malicious_confidence_90% (W)
K7GWP2PWorm ( 004bad931 )
Cybereasonmalicious.52025e
BaiduWin32.Worm.VB.bf
CyrenW32/Copali.BUKA-8635
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/VB.OLE
ZonerTrojan.Win32.25494
APEXMalicious
AvastWin32:Agent-AXUS [Trj]
ClamAVWin.Dropper.Cerber-7134131-0
KasperskyTrojan.Win32.Agentb.btmh
BitDefenderGen:Variant.Kazy.28960
NANO-AntivirusTrojan.Win32.TrjGen.deyzgg
ViRobotTrojan.Win32.Zbot.184320.D
MicroWorld-eScanGen:Variant.Kazy.28960
TencentMalware.Win32.Gencirc.10b0cd1f
Ad-AwareGen:Variant.Kazy.28960
SophosML/PE-A + Troj/VB-HTM
ComodoTrojWare.Win32.Swisyn.DFX@5ci87q
BitDefenderThetaAI:Packer.C41E46821F
VIPRETrojan.Win32.Generic!BT
TrendMicroWORM_COPALI_EK050311.UVPM
McAfee-GW-EditionBehavesLike.Win32.VBObfus.dt
FireEyeGeneric.mg.e53b16752025e78f
EmsisoftGen:Variant.Kazy.28960 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan/Swisyn.wsw
WebrootTrojan.Comroki.Gen
AviraTR/Beebone.rhwnabs
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.93BFFC
MicrosoftWorm:Win32/Copali.B
ArcabitTrojan.Kazy.D7120
SUPERAntiSpywareTrojan.Agent/Gen-Symmi
GDataGen:Variant.Kazy.28960
TACHYONTrojan/W32.Agent.262144.C
AhnLab-V3Trojan/Win32.Zbot.R106377
McAfeeW32/Worm-GAM!E53B16752025
MAXmalware (ai score=81)
VBA32Trojan.Agentb
MalwarebytesTrojan.Agent
PandaGeneric Malware
TrendMicro-HouseCallWORM_COPALI_EK050311.UVPM
RisingWorm.Copali!1.A2C3 (CLASSIC)
YandexTrojan.Swisyn!pJglm6aTiAU
IkarusTrojan.Win32.Agentb
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Generic.AC.1EEAF!tr
AVGWin32:Agent-AXUS [Trj]

How to remove Kazy.28960?

Kazy.28960 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment