Risktool.Flystudio.17324 removal guide

The Risktool.Flystudio.17324 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Risktool.Flystudio.17324 virus can do?

Creates RWX memory
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is likely packed with VMProtect

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Risktool.Flystudio.17324?


File Info:
crc32: 3D40A721
md5: 27bbd5dfa6f3a1d6bb54495f51a3387d
name: zdy
sha1: d9a12223a7aa39405680fe534f2efc95bab0379f
sha256: ae799692c688860f0c05fd468c26640ac3f6f16d74cd6d3aeb822c2218eb0fe6
sha512: 25b29f1d2bdcbf6c8d7dcdee535b11c79ccf028acb50321b0ff0d186673d43dd59c91ac36f705e8eaab53fd835254993b9c8a77eb343c6613fc3bff1409a4958
ssdeep: 98304:padu+mvWGJjWxqbF97A2eb0VFNq655peyv4YT5bP:IM+ypn7ASVFNP5neABTF
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Risktool.Flystudio.17324 also known as:

Bkav	W32.AIDetectVM.malware
CAT-QuickHeal	Risktool.Flystudio.17324
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 005246d51 )
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.3a7aa3
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Evo-gen [Susp]
Rising	Trojan.Generic@ML.99 (RDML:0ElAVvsva1K59Ge5q33y1w)
Comodo	TrojWare.Win32.Agent.ISVQ@5mbonp
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.27bbd5dfa6f3a1d6
SentinelOne	DFI – Malicious PE
Antiy-AVL	GrayWare/Win32.FlyStudio.a
Endgame	malicious (high confidence)
Microsoft	Trojan:Win32/Wacatac.D!ml
Acronis	suspicious
VBA32	BScope.Trojan.Tiggre
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AC potentially unwanted
Ikarus	PUA.BlackMoon
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/QQWare.A!tr
BitDefenderTheta	Gen:NN.ZexaF.34098.@xW@aiw7Nnhb
AVG	Win32:Evo-gen [Susp]
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	HEUR/QVM07.1.CDC5.Malware.Gen

How to remove Risktool.Flystudio.17324?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Risktool.Flystudio.17324 removal guide