About “Trojan.Casur” infection

The Trojan.Casur is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What Trojan.Casur virus can do?

• Executable code extraction
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Mimics the system’s user agent string for its own requests
• A process attempted to delay the analysis task.
• Expresses interest in specific running processes
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Uses Windows utilities for basic functionality
• Attempts to repeatedly call a single API many times in order to delay analysis time
• Creates a copy of itself
• Anomalous binary characteristics

How to determine Trojan.Casur?

File Info:
crc32: 09BF3E6A
md5: b50be0db6ed78d6b0f7ff6aef510f3a9
name: 068qc3tja.exe
sha1: 3e4fe28ffbae748a5d92a639c68f5145309d07e5
sha256: 063f436837f673c3e9655628cf63ad0aa6b1078335f219f5d168a3591223810a
sha512: af8c9f01b298712797f4497aef99145c618d129fb6beb92523c8e1bb2c9cab751cdee0ec51f27d5ae9f2ba53e2e59a7e9a47334911c86f515a9cf7f9f79ba4da
ssdeep: 3072:lOz1rBhkQYQe++Ti7BYkTQTR/Kw1D15It5kE6uKr30qwwvCFUla2+UsSYQ:qrBhkQYX6ETpf/I71A3zwwcUla2+UD
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:
0: [No Data]

Trojan.Casur also known as:

How to remove Trojan.Casur?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.