Kazy.29381 information

The Kazy.29381 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Kazy.29381 virus can do?

Network activity detected but not expressed in API logs

How to determine Kazy.29381?


File Info:
crc32: A88E4D77
md5: a3fa0e3ba3b6ac85c6855148b5cdf1b4
name: A3FA0E3BA3B6AC85C6855148B5CDF1B4.mlw
sha1: 341760d1e150b36975a80090880aa692ed938f2e
sha256: 1e54109748c48347dfe911381d3a33be9624345af92edecbdbc448421c16ee50
sha512: fa7895efdc427f021d0a26fe28e65caa8cff1726049ef14d177770e65853c969092778c3030a3cee728b682bb4c116fda7d1ae2923535dae0a08ce58430ab613
ssdeep: 768:IG5pqIj52agahuGxzadCBqq23gsTq23gsTq23gst:kCZJhfC/jjJ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: PortableApps.com Installer Copyright 2007-2010 PortableApps.com.
InternalName: Mozilla Firefox, Portable Edition
PortableApps.comAppID: FirefoxPortable
FileVersion: 3.6.10.0
PortableApps.comFormatVersion: 2.0
CompanyName: PortableApps.com
LegalTrademarks: PortableApps.com is a registered trademark of Rare Ideas, LLC.
Comments: For additional details, visit PortableApps.com
ProductName: Mozilla Firefox, Portable Edition
PortableApps.comInstallerVersion: 2.0.3.0
ProductVersion: 3.6.10.0
FileDescription: Mozilla Firefox, Portable Edition
OriginalFilename: FirefoxPortable_3.6.10_English.paf.exe
Translation: 0x0000 0x04b0

Kazy.29381 also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0054cb111 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Kazy.29381
Cylance	Unsafe
Zillya	Trojan.Kryptik.Win32.942526
Sangfor	Trojan.Win32.Kryptik.8
CrowdStrike	win/malicious_confidence_70% (D)
Alibaba	Trojan:Win32/Kryptik.74a8bc0d
K7GW	Trojan ( 0054cb111 )
Cybereason	malicious.ba3b6a
Cyren	W32/Zbot.CK.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.AJPF
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Trojan.Zbot-6791103-0
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Kazy.29381
NANO-Antivirus	Trojan.Win32.Dwn.cuyit
MicroWorld-eScan	Gen:Variant.Kazy.29381
Tencent	Malware.Win32.Gencirc.10c26b67
Ad-Aware	Gen:Variant.Kazy.29381
Sophos	ML/PE-A + Troj/Mdrop-DMM
Comodo	Malware@#dd94mknl0xlu
BitDefenderTheta	Gen:NN.ZexaF.34266.Ju1@aOHsl9b
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TSPY_ZBOT.SMYX
McAfee-GW-Edition	PWS-Zbot.gen.gc
FireEye	Generic.mg.a3fa0e3ba3b6ac85
Emsisoft	Gen:Variant.Kazy.29381 (B)
Jiangmin	TrojanDropper.Dapato.bml
Avira	TR/Crypt.XPACK.Gen
Kingsoft	Win32.Troj.Generic.v.(kcloud)
Microsoft	Trojan:Win32/Dynamer!ac
GData	Gen:Variant.Kazy.29381
Acronis	suspicious
McAfee	PWS-Zbot.gen.gc
MAX	malware (ai score=100)
VBA32	Trojan.Dynamer
Malwarebytes	Malware.AI.3386590755
Panda	Trj/Banker.JJG
TrendMicro-HouseCall	TSPY_ZBOT.SMYX
Rising	Trojan.Generic@ML.99 (RDML:5m8Bokf/7xSTf7gpyCkznA)
Yandex	TrojanSpy.ZBot.Gen!Pac.24
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Kryptik.HZ!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Kazy.29381?

Kazy.29381 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X