Trojan

Trojan-PSW.Win32.Azorult.agoo removal

Malware Removal

The Trojan-PSW.Win32.Azorult.agoo is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-PSW.Win32.Azorult.agoo virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Attempts to modify proxy settings
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
mm5132645.xyz

How to determine Trojan-PSW.Win32.Azorult.agoo?


File Info:

crc32: 5E9F88AD
md5: 27fcbd1c9d399a27ccdc6c383e5d13ae
name: him.exe
sha1: 3e4d71213b412c9ce7b8c8766264fbfe035f90fb
sha256: 4f2bb7cf3cf4b6215498972174b01705ef6b5b2f1e1746d7e830d70dbcdb66f1
sha512: 536e0305e84e3aab34d82c4a0da554df28e09beccaeee6c57b6552d46f2855a3a239214aa43e9d2487761326c8fe3883ec57b845ca233423767b0caeb67f45f0
ssdeep: 3072:nu4/04zzVg5cLEph/Fn91Tdqn3U+0mPREPkxRYjCdi:nn04785F9p03U+TFX4
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0219 0x04e4

Trojan-PSW.Win32.Azorult.agoo also known as:

MicroWorld-eScanTrojan.GenericKD.42077555
FireEyeGeneric.mg.27fcbd1c9d399a27
CAT-QuickHealTrojanpws.Azorult
McAfeeTrojan-FRQV!27FCBD1C9D39
CylanceUnsafe
AegisLabTrojan.Multi.Generic.4!c
SangforMalware
K7AntiVirusTrojan ( 0055c92c1 )
BitDefenderTrojan.GenericKD.42077555
K7GWTrojan ( 0055c92c1 )
CrowdStrikewin/malicious_confidence_100% (W)
F-ProtW32/Agent.BKJ.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:CrypterX-gen [Trj]
ClamAVWin.Malware.Glupteba-7426017-1
GDataTrojan.GenericKD.42077555
KasperskyTrojan-PSW.Win32.Azorult.agoo
AlibabaTrojan:Win32/GenKryptik.34c2c04c
NANO-AntivirusTrojan.Win32.Steam.gklaep
RisingTrojan.Kryptik!1.BFD8 (CLASSIC)
Ad-AwareTrojan.GenericKD.42077555
EmsisoftTrojan.GenericKD.42077555 (B)
ComodoMalware@#3i52xy5l7o7k0
F-SecureTrojan.TR/Kryptik.sschw
DrWebTrojan.PWS.Steam.17100
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Downloader.ch
Trapminemalicious.moderate.ml.score
SophosMal/Generic-S
IkarusTrojan.Win32.Krypt
CyrenW32/Trojan.PCNP-4007
JiangminTrojanDownloader.Bandit.ayz
WebrootW32.Trojan.Gen
AviraTR/Kryptik.sschw
MAXmalware (ai score=100)
Antiy-AVLTrojan[PSW]/Win32.AZORult
Endgamemalicious (high confidence)
ArcabitTrojan.Generic.D2820D73
ZoneAlarmTrojan-PSW.Win32.Azorult.agoo
MicrosoftTrojan:Win32/CryptInject.PC!MTB
AhnLab-V3Trojan/Win32.MalPe.R301700
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.32519.ku0@aS4Ulsn
ALYacTrojan.GenericKD.42077555
VBA32Malware-Cryptor.Limpopo
MalwarebytesTrojan.MalPack.GS
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Kryptik.GYZB
TrendMicro-HouseCallTROJ_GEN.R03BC0DL419
SentinelOneDFI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.DYZD!tr
AVGWin32:CrypterX-gen [Trj]
Cybereasonmalicious.13b412
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.PSW.392

How to remove Trojan-PSW.Win32.Azorult.agoo?

Trojan-PSW.Win32.Azorult.agoo removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment