Trojan.Masson removal tips

The Trojan.Masson is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Masson virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
At least one process apparently crashed during execution
Reads data out of its own binary image
Authenticode signature is invalid

How to determine Trojan.Masson?


File Info:
name: 748AD64E7C2DE2EA8618.mlw
path: /opt/CAPEv2/storage/binaries/e0a054f539b59d05bcc71f681b8c236a6e0990081d5c7fb5ce7b0f154dc556c2
crc32: 8F6AA636
md5: 748ad64e7c2de2ea8618fcf692f797c9
sha1: ff3145003459eb6a5331ced7a05c7d4b6ceaea43
sha256: e0a054f539b59d05bcc71f681b8c236a6e0990081d5c7fb5ce7b0f154dc556c2
sha512: 078e137eccd8056eff4313edbdc1d36fcb8aa522958db8fe2ddb5c4f78e380a7c9e8526c606827a9ba616d535d66e8a466dd698632b7457d8a80ca6d22ba0f02
ssdeep: 6144:zAsIdk3mnEpZ71dFJvJ/Rtz4WPAMObS56BfjmgtLi:zsm3mEn71BR/H/UbSIl7Li
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CCA5BF02F2D940BAD2E7153014BA6F3AEABD7D125A2199C7B734FE5E5D31241E92830F
sha3_384: 2d5f48b567d59ea35cb6e5424d5fcf563ef2100136aa397ac5e7335249b86032a3452b69ad6b4807a918bb0db229816b
ep_bytes: 558bec6aff68f8d85d006888d25c0064
timestamp: 2006-02-02 00:15:34

Version Info:
Comments: 
CompanyName: Sysinternals - www.sysinternals.com
FileDescription: Rootkit detection utility
FileVersion: 1.70
InternalName: 
LegalCopyright: Copyright (C) 2005-2006 Bryce Cogswell and Mark Russinovich
LegalTrademarks: 
OriginalFilename: 
PrivateBuild: 
ProductName: Sysinternals Rootkitrevealer
ProductVersion: 1.70
SpecialBuild: 
Translation: 0x0409 0x04b0

Trojan.Masson also known as:

Bkav	W32.AIDetect.malware2
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.Swisyn.OD5
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (D)
Cyren	W32/Swisyn.R.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
ClamAV	Win.Malware.Swisyn-7008263-0
Avast	Win32:Malware-gen
Sophos	ML/PE-A
DrWeb	Trojan.Siggen4.42488
TrendMicro	TROJ_PATCHED_CA0832E7.TOMC
FireEye	Generic.mg.748ad64e7c2de2ea
Ikarus	Trojan.Win32.Swisyn
Antiy-AVL	Trojan/Generic.ASMalwS.16D5ED9
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Win32.Trojan.PSE.14A82VQ
VBA32	Trojan.Masson
Malwarebytes	Malware.AI.4240401537
TrendMicro-HouseCall	TROJ_PATCHED_CA0832E7.TOMC
Rising	Trojan.Generic@ML.97 (RDML:q3FlDg+esxX6822mIaN1wQ)
Yandex	Trojan.Swisyn!PP6EGUOC0TI
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Swisyn.R!tr
AVG	Win32:Malware-gen
Cybereason	malicious.03459e

How to remove Trojan.Masson?

Trojan.Masson removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X