Malware

Troj/AutoG-FZ malicious file

Malware Removal

The Troj/AutoG-FZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Troj/AutoG-FZ virus can do?

  • Presents an Authenticode digital signature
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Network activity detected but not expressed in API logs

How to determine Troj/AutoG-FZ?


File Info:

crc32: 9DDDBBDD
md5: 1ea0d003dc52dbb567c49f3e4f59501a
name: news2_01.exe
sha1: 69ae3bcc080b63f0852f4e45f19692b781d384df
sha256: 4b95d1c6055852dec174bec750d07c1a155e5645ff41f619e80fbd330a38fb7c
sha512: b403ef0cfd58f794f40b40510feda83b1eed7c1d023c08401f653887dfff6e5da733cf92e41edc45e942544bfdf47f4c733692d9fc88a48427e87bcfa41a297d
ssdeep: 24576:2CCrw2nxS4IYLhxns88STT5imRdf1n5hCO:iM2oDUz0ST1n75hCO
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2019 x8da3x538bx538bx7f29 .Inc
InternalName:
FileVersion: 2019.5.12.20
CompanyName:
ProductName: x70edx70b9x65b0x95fb
ProductVersion: 2019.5.12.20
FileDescription: x70edx70b9x65b0x95fb
OriginalFilename:
Translation: 0x0804 0x04b0

Troj/AutoG-FZ also known as:

BkavW32.AIDetectVM.malware2
MicroWorld-eScanTrojan.GenericKD.42027039
CAT-QuickHealTrojan.GenericRI.S8303638
Qihoo-360Trojan.Generic
McAfeeGenericR-QRE!1EA0D003DC52
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan-Downloader ( 00551bd41 )
BitDefenderTrojan.GenericKD.42027039
K7GWTrojan-Downloader ( 00551bd41 )
TrendMicroPUA.Win32.AdLoad.USMANHBBAL
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Adware-gen [Adw]
GDataTrojan.GenericKD.42027039
Kasperskynot-a-virus:HEUR:AdWare.Win32.ComponentBased.gen
AlibabaTrojanDownloader:Win32/Adload.f6058d68
TencentMalware.Win32.Gencirc.10b091fe
Ad-AwareTrojan.GenericKD.42027039
SophosTroj/AutoG-FZ
ComodoApplicUnwnt@#1cgbt4q0obvvi
F-SecureTrojan.TR/Dldr.Adload.gwmjr
ZillyaDownloader.Adload.Win32.89794
Invinceaheuristic
McAfee-GW-EditionGenericR-QRE!1EA0D003DC52
FireEyeGeneric.mg.1ea0d003dc52dbb5
EmsisoftTrojan.GenericKD.42027039 (B)
IkarusTrojan-Downloader.Win32.Adload
CyrenW32/Trojan.RTPC-4525
JiangminAdWare.ComponentBased.d
WebrootW32.Adware.Gen
AviraTR/Dldr.Adload.gwmjr
Antiy-AVLTrojan/Win32.Azden
Endgamemalicious (high confidence)
ArcabitTrojan.Generic.D281481F
ZoneAlarmnot-a-virus:HEUR:AdWare.Win32.ComponentBased.gen
MicrosoftPUA:Win32/CoinMiner
AhnLab-V3Adware/Win32.AdLoad.C3478820
ALYacTrojan.GenericKD.42027039
MAXmalware (ai score=87)
VBA32Adware.ComponentBased
MalwarebytesAdware.Downloader
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/TrojanDownloader.Adload.NUQ
TrendMicro-HouseCallPUA.Win32.AdLoad.USMANHBBAL
RisingAdware.AdPop!1.BA31 (CLOUD)
YandexPUA.ComponentBased!
eGambitUnsafe.AI_Score_99%
FortinetW32/Adload.NUJ!tr.dldr
AVGWin32:Adware-gen [Adw]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)
MaxSecureTrojan.Malware.74556655.susgen

How to remove Troj/AutoG-FZ?

Troj/AutoG-FZ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment