Trojan

What is “Trojan.Heur.BuZa77RyL6ei”?

Malware Removal

The Trojan.Heur.BuZa77RyL6ei is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Heur.BuZa77RyL6ei virus can do?

  • Reads data out of its own binary image
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan.Heur.BuZa77RyL6ei?


File Info:

crc32: A7F3A731
md5: a5b955fa3ac736fcfca2fe17ba431629
name: A5B955FA3AC736FCFCA2FE17BA431629.mlw
sha1: d125a02cb56b528cbbd37c530a38bdbe7557d53c
sha256: bcb96ac08308820ab9ee39dc80b4e705312716c5efd1be12e6e6920788c57ad2
sha512: 706243d4f49f6486d0e247418a846928933da52820b9b63fac92c50be200e730cb71ce08fcc54c427e2daf95788f91195a7c9f5ef0419c3c494f151dd866202c
ssdeep: 12288:t0RqQftMrHky9hr2K2lzWcL5jFjVKkBJHkQ1n2:cqQftif52+cljFjASL2
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

Trojan.Heur.BuZa77RyL6ei also known as:

K7AntiVirusTrojan ( 00544ddf1 )
LionicHacktool.Win32.Black.x!c
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Gamania.40969
CynetMalicious (score: 100)
ALYacGen:Trojan.Heur.BuZa77RyL6ei
CylanceUnsafe
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_70% (D)
K7GWTrojan ( 00544ddf1 )
Cybereasonmalicious.a3ac73
CyrenW32/Heuristic-162!Eldorado
SymantecInfostealer
ESET-NOD32multiple detections
ZonerProbably Heur.ExeHeaderH
APEXMalicious
AvastWin32:Trojan-gen
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Trojan.Heur.BuZa77RyL6ei
NANO-AntivirusTrojan.Win32.Crypted.bncohh
MicroWorld-eScanGen:Trojan.Heur.BuZa77RyL6ei
TencentWin32.Trojan.Generic.Lnob
Ad-AwareGen:Trojan.Heur.BuZa77RyL6ei
SophosGeneric ML PUA (PUA)
ComodoMalware@#2nftckrwbf99o
BitDefenderThetaAI:Packer.D84BC9041E
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_LOLYDA.SMT
McAfee-GW-EditionBehavesLike.Win32.Generic.gc
FireEyeGeneric.mg.a5b955fa3ac736fc
EmsisoftGen:Trojan.Heur.BuZa77RyL6ei (B)
SentinelOneStatic AI – Malicious PE
JiangminPacked.Black.uca
WebrootW32.Lolyda.Gen
AviraTR/Dropper.Gen2
eGambitGeneric.Malware
Antiy-AVLTrojan/Generic.ASBOL.C5D1
KingsoftWin32.Troj.Black.d.(kcloud)
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Heur.BuZa77RyL6ei
SUPERAntiSpywareTrojan.Agent/Gen-Dropper
GDataGen:Trojan.Heur.BuZa77RyL6ei
McAfeeArtemis!A5B955FA3AC7
MAXmalware (ai score=80)
VBA32Trojan.Wacatac
MalwarebytesRiskWare.Tool.CK
PandaGeneric Suspicious
TrendMicro-HouseCallTROJ_LOLYDA.SMT
RisingTrojan.PSW.Win32.GameOL.ytl (CLASSIC)
IkarusTrojan-Spy.Win32.Vagon.A
FortinetW32/Black.D
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Trojan.Heur.BuZa77RyL6ei?

Trojan.Heur.BuZa77RyL6ei removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment