Malware

PWS:Win32/Azorult.GG!MTB removal tips

Malware Removal

The PWS:Win32/Azorult.GG!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What PWS:Win32/Azorult.GG!MTB virus can do?

  • Unconventionial binary language: Russian
  • Unconventionial language used in binary resources: Russian
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

How to determine PWS:Win32/Azorult.GG!MTB?



File Info:

crc32: 1257F7E0
md5: 79fe9c45dd005366300010100ed99948
name: 79FE9C45DD005366300010100ED99948.mlw
sha1: dcd88f873ce7bec8d1cbd6208b853f8167995daf
sha256: 74fc186862a68d0d3091b8c157cbf3223eea150340071fb52de956d7920b51f1
sha512: f8625786ac48500ff31e7d261a47bf30f1c3ae6c1f9c8f9a870c75ca93c777b0ed6d89af8ef45af35e6ac26754ae1a9b1b509e8bc4e0f854cb4fd157338a3ff3
ssdeep: 12288:p1O9OVod8Do6mSfqppmvufOgY7a+Qt55pxGmxU:DqO1EiaIvufnXLM
type: PE32 executable (GUI) Intel 80386, for MS Windows


Version Info:

LegalCopyright: KiberInfinity xa9
InternalName: 
FileVersion: 0.8.8.75
CompanyName: Kiberx41fx441x438x445 Development
LegalTrademarks: 
Comments: 
ProductName: KiberInfinity's ScreenShoter
ProductVersion: 0.8.6.0
FileDescription: KiberInfinity's ScreenShoter
OriginalFilename: kiss.exe
Translation: 0x0419 0x04e3

PWS:Win32/Azorult.GG!MTB also known as:

K7AntiVirusPassword-Stealer ( 0052f96e1 )
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Stealer.23759
CynetMalicious (score: 85)
ALYacGeneric.Delph.PWS.DD4EDE4C
CylanceUnsafe
ZillyaTrojan.Coins.Win32.29
SangforTrojan.Win32.Generic.ky
CrowdStrikewin/malicious_confidence_60% (W)
K7GWPassword-Stealer ( 0052f96e1 )
Cybereasonmalicious.5dd005
SymantecInfostealer.Rultazo
ESET-NOD32a variant of Win32/PSW.Delf.OSF
ZonerTrojan.Win32.68765
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan-PSW.Win32.Generic
BitDefenderGeneric.Delph.PWS.DD4EDE4C
NANO-AntivirusTrojan.Win32.Coins.fbafbl
MicroWorld-eScanGeneric.Delph.PWS.DD4EDE4C
TencentWin32.Trojan-qqpass.Qqrob.Alte
Ad-AwareGeneric.Delph.PWS.DD4EDE4C
ComodoMalware@#dr4qu6lxa0u6
BitDefenderThetaAI:Packer.2B90FC0317
VIPRETrojan.Win32.Generic!BT
TrendMicroTrojanSpy.Win32.CLIPBANKER.SMMR
McAfee-GW-EditionGenericRXFM-MS!79FE9C45DD00
FireEyeGeneric.Delph.PWS.DD4EDE4C
EmsisoftGeneric.Delph.PWS.DD4EDE4C (B)
AviraTR/AD.MoksSteal.dkaaw
eGambitUnsafe.AI_Score_99%
MicrosoftPWS:Win32/Azorult.GG!MTB
AegisLabTrojan.Win32.Lydra.mCxs
ZoneAlarmHEUR:Trojan-PSW.Win32.Generic
GDataWin32.Trojan-Stealer.KBot.B
AhnLab-V3Trojan/Win32.Delf.R260844
McAfeeGenericRXFP-KM!79FE9C45DD00
MAXmalware (ai score=95)
VBA32BScope.TrojanPSW.Stealer
MalwarebytesMalware.AI.3920525542
PandaTrj/CI.A
TrendMicro-HouseCallTrojanSpy.Win32.CLIPBANKER.SMMR
RisingStealer.Delf!8.415 (CLOUD)
YandexTrojan.GenAsa!+tfeSY1qtzg
IkarusTrojan-Spy.Azorult
FortinetW32/Delf.OSF!tr.pws
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/TrojanPSW.Generic.HgIASOUA

How to remove PWS:Win32/Azorult.GG!MTB?

PWS:Win32/Azorult.GG!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment