Categories: Malware

Kazy.56153 removal

The Kazy.56153 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Kazy.56153 virus can do?

At least one process apparently crashed during execution
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Kazy.56153?


File Info:
name: CF3BF5FA0A7C73805A54.mlwpath: /opt/CAPEv2/storage/binaries/bbbbf151a0c301679bc75d902b8653b3cd684d6acc914df76de799d977ad1493crc32: CB37255Cmd5: cf3bf5fa0a7c73805a54467de05c29b8sha1: b1d31033bcfafcbdeef8d52da422f3c10f70e7besha256: bbbbf151a0c301679bc75d902b8653b3cd684d6acc914df76de799d977ad1493sha512: 4567888764f160f3eb0ccdab8aa76406d0e72ada174444837f2e1539d1a5b9f51199d6d15fcfe16fd8b1a63632c3cd39df8efe938ab2f97f1899e4bccff6c793ssdeep: 6144:bsCBYUeDZOIsaa1+oBM6/2o3EwwQBlJl4LwQ9kvFDZ576RzWB9XV7DoSQ:bseYvZOIXdoBJ/2oUlmJl4LwRNCRzq5Qtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1A7742A22E053EC4FE91B9C7C52538C1982DE63B58F26172F6BF8551ED22AF50E8A0717sha3_384: dd2baa4377fbca4474cb49d6aaf1c6d8d5ecf8c1f701f74605045f332e8fd94c6b0052725653e0efa59349ffbb4a6c15ep_bytes: e88c01feffe913ffffff000000000000timestamp: 2011-01-03 10:31:16
Version Info:
CompanyName: Quick Heal Technologies (P) Ltd.FileDescription: Quick Heal AntiMalwareFileVersion: 6.0.0.1InternalName: asmain.exeLegalCopyright: © Quick Heal Technologies (P) Ltd. All rights reserved.OriginalFilename: asmain.exeProductName: Quick Heal AntiVirusProductVersion: 13.00Translation: 0x0409 0x04e4

Kazy.56153 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Kazy.56153
FireEye	Generic.mg.cf3bf5fa0a7c7380
ALYac	Gen:Variant.Kazy.56153
Cylance	Unsafe
VIPRE	Trojan.Win32.Reveto.D (v)
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 004bcce41 )
Alibaba	TrojanSpy:Win32/EncPk.5c5910be
K7GW	Trojan ( 004bcce41 )
CrowdStrike	win/malicious_confidence_100% (W)
Cyren	W32/Zbot.DP.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Spy.Zbot.YW
APEX	Malicious
ClamAV	Win.Trojan.Reveton-4
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Kazy.56153
NANO-Antivirus	Trojan.Win32.MlwGen.brkaeu
SUPERAntiSpyware	Trojan.Agent/Gen-Crypt
Avast	Win32:dUmPeX [Susp]
Tencent	Malware.Win32.Gencirc.116ecfaf
Ad-Aware	Gen:Variant.Kazy.56153
Sophos	Mal/EncPk-ABFO
Comodo	Packed.Win32.MUPX.Gen@24tbus
Zillya	Trojan.Menti.Win32.31328
McAfee-GW-Edition	PWS-Zbot.gen.rd
Emsisoft	Gen:Variant.Kazy.56153 (B)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Kazy.56153
Jiangmin	Trojan/Generic.xbee
Webroot	W32.Infostealer.Zeus
Avira	TR/Spy.Zbot.YI.7
Antiy-AVL	Trojan/Generic.ASMalwS.2BD56
Kingsoft	Win32.Troj.Undef.(kcloud)
ViRobot	Trojan.Win32.Zbot.354304.C
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	PWS:Win32/Zbot!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Menti.R20280
Acronis	suspicious
McAfee	PWS-Zbot.gen.rd
MAX	malware (ai score=100)
VBA32	BScope.Trojan.Skeeyah
Malwarebytes	Malware.AI.744254185
Rising	Spyware.Zbot!8.16B (CLOUD)
Yandex	Trojan.GenAsa!Me388YHOG10
Ikarus	Worm.Socks
MaxSecure	Trojan.Malware.2588.susgen
Fortinet	W32/Kryptik.ABC!tr
BitDefenderTheta	Gen:NN.ZexaF.34212.vm1@ailYxFni
AVG	Win32:dUmPeX [Susp]
Cybereason	malicious.a0a7c7
Panda	Trj/Genetic.gen