Trojan.Csfrsys (file analysis)

The Trojan.Csfrsys is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Csfrsys virus can do?

Reads data out of its own binary image
Drops a binary and executes it
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.Csfrsys?


File Info:
crc32: 32F208E3
md5: 3b34b1fb150c3e1eb342c570da475f7e
name: 3B34B1FB150C3E1EB342C570DA475F7E.mlw
sha1: b0df30d40985886cb3c242d3a4e96a9c3125d2b0
sha256: 1dedea05916b5f7a24d1239ad3470b84289e5e74290498c0671ccf2444076cec
sha512: b41426d8ca9216f7cf2e4f31a3c1503699518030565a024dc1264527b9d7abdc0273d0b710678a49d6f4593ca187269e116340eb83f25bf47da59d2493c18b58
ssdeep: 196608:CnBXS3wbMU8aQNyOiJZS6NHTw8d37GvQrWERSIR1usAau0p61BRl4wxf:CnBswb0TN2JIIH1d37GIrWEYIHuslKj5
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Setup Engine Copyright xa9 2001 - 2004 Indigo Rose Corporation
InternalName: suf60_setup
FileVersion: 6.0.1.4
CompanyName: 
PrivateBuild: 
LegalTrademarks: Setup Factory is a trademark of Indigo Rose Corporation.
Comments: Created with Setup Factory 6.0
ProductName: Setup Factory 6.0 Runtime
SpecialBuild: 
ProductVersion: 6.0.1.4
FileDescription: Setup Application
OriginalFilename: setup.exe
Translation: 0x0409 0x04e4

Trojan.Csfrsys also known as:

Lionic	Trojan.Win32.Csfrsys.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
ALYac	Trojan.GenericKD.36386663
Cylance	Unsafe
Sangfor	Riskware.Win32.Agent.ky
Cybereason	malicious.b150c3
Symantec	Trojan.Gen.2
Avast	FileRepMalware
Kaspersky	Trojan.Win32.Csfrsys.va
BitDefender	Trojan.GenericKD.36386663
NANO-Antivirus	Trojan.Win32.Csfrsys.ezjjqr
MicroWorld-eScan	Trojan.GenericKD.36386663
Tencent	Win32.Trojan.Csfrsys.Lkdw
Ad-Aware	Trojan.GenericKD.36386663
Sophos	Mal/Generic-S
Comodo	Malware@#h7qvw7ezbhuq
BitDefenderTheta	Gen:NN.ZedlaF.34266.du8@aGRLfYib
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.3b34b1fb150c3e1e
Emsisoft	Trojan.GenericKD.36386663 (B)
Avira	TR/Csfrsys.qhuas
eGambit	Unsafe.AI_Score_100%
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Generic.D22B3767
GData	Trojan.GenericKD.36386663
McAfee	Artemis!3B34B1FB150C
MAX	malware (ai score=97)
VBA32	Trojan.Csfrsys
Panda	Trj/CI.A
Ikarus	Trojan.Win32.Csfrsys
Fortinet	W32/Csfrsys.VA!tr
AVG	FileRepMalware

How to remove Trojan.Csfrsys?

Trojan.Csfrsys removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X