About "Trojan-GameThief.Win32.Magania.utzf" infection

The Trojan-GameThief.Win32.Magania.utzf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-GameThief.Win32.Magania.utzf virus can do?

Executable code extraction
Creates RWX memory
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan-GameThief.Win32.Magania.utzf?


File Info:
crc32: 1141BC04
md5: 77f8f67ad057a69a567b04b06d77e81c
name: 77F8F67AD057A69A567B04B06D77E81C.mlw
sha1: ce84b322bc9c1e592afcf7d84bb6089c90ed78fa
sha256: 6357f1cbfab364d3acb85389d732da4a1e090af33e3801f701aa4cfae790bde4
sha512: c51519a06591fe3ecbed0a71591d70988e4ebadfdf15b1df44427a8bd2217f30d0f2aa0db3c5c568170e5d9868ce4487bf145f2e9b02a147d217a6e91c5a43d2
ssdeep: 12288:60HKW5wwyPImzQ/+afpnRyY9jjU870aFbaY9xtzXepNgfA+pX:60HK0wwuFQZfpcYRzYaFv9xtzXeXgfA
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: java
InternalName: Copyright ? 2013
FileVersion: 7.0.110.21
CompanyName: Oracle Corporation
PrivateBuild: 
LegalTrademarks: 
Comments: 
ProductName: Java(TM) Platform SE 7 U11
SpecialBuild: 
ProductVersion: 7.0.110.21
FileDescription: Java(TM) Platform SE binary
OriginalFilename: java.exe
Translation: 0x0804 0x04b0

Trojan-GameThief.Win32.Magania.utzf also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Trojan ( 004baa321 )
Cybereason	malicious.2bc9c1
Cyren	W32/Threat-HLLIE-based!Maximus
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.Enigma.AAA
APEX	Malicious
Avast	Win32:Trojan-gen
ClamAV	Win.Trojan.Bifrose-9837535-0
Kaspersky	Trojan-GameThief.Win32.Magania.utzf
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZexaF.34722.NC0aaSxGOvhb
TrendMicro	TROJ_GEN.R005C0DF121
McAfee-GW-Edition	BehavesLike.Win32.Sality.jc
FireEye	Generic.mg.77f8f67ad057a69a
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_99%
Microsoft	Backdoor:Win32/Zegost.CH
GData	Win32.Trojan.Agent.EZC0PW
AhnLab-V3	Backdoor/Win.Zegost.C4507386
McAfee	Artemis!77F8F67AD057
VBA32	BScope.Trojan.Downloader
Malwarebytes	Malware.AI.2251104497
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R005C0DF121
Rising	Malware.Heuristic!ET#96% (RDMK:cmRtazo3DmDhpSMfgfIYdV6sArpo)
Ikarus	Virus.Win32.Vundo
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Trojan-gen

How to remove Trojan-GameThief.Win32.Magania.utzf?

Trojan-GameThief.Win32.Magania.utzf removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Trojan-GameThief.Win32.Magania.utzf” infection