Trojan

Trojan-PSW.Win32.Azorult.ajdk removal guide

Malware Removal

The Trojan-PSW.Win32.Azorult.ajdk is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-PSW.Win32.Azorult.ajdk virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Trojan-PSW.Win32.Azorult.ajdk?


File Info:

crc32: E630F33E
md5: e3093d7779b65b6f967006e72d62db8c
name: bi.exe
sha1: 83ab77951e0c106662a1fc6fb3ff0c5df647fe0c
sha256: 0b6a5d0de289e00f07ef75871d8c952cffd0f3c5d0345fe90977863b432fca5d
sha512: 9b2c0877e602f37a0d8f0accd8f7408a8eda64188ac8b46f0bcca20a8a6d5f0074f289dc9409a766f24bbcfdc872539f2b2aeaefa561f8e55b5c98dba37765d1
ssdeep: 24576:Au6J33O0c+JY5UZ+XC0kGso6FaoXejPJ0O34zjjtg/xS+mHPQWY:qu0c++OCvkGs9Faout0O34L2HmLY
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0809 0x04b0

Trojan-PSW.Win32.Azorult.ajdk also known as:

BkavW32.AIDetectVM.malware
MicroWorld-eScanTrojan.GenericKD.42245745
FireEyeGeneric.mg.e3093d7779b65b6f
McAfeeArtemis!E3093D7779B6
MalwarebytesTrojan.MalPack.AutoIt
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderTrojan.GenericKD.42245745
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.51e0c1
AvastWin32:Trojan-gen
GDataTrojan.GenericKD.42245745
KasperskyTrojan-PSW.Win32.Azorult.ajdk
AegisLabTrojan.Win32.Malicious.4!c
APEXMalicious
Endgamemalicious (high confidence)
SophosMal/Generic-S
F-SecureTrojan.TR/AD.MoksSteal.caamb
DrWebTrojan.PWS.Stealer.25089
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Downloader.tc
Trapminemalicious.high.ml.score
EmsisoftTrojan.Autoit (A)
AviraTR/AD.MoksSteal.caamb
ArcabitTrojan.Generic.D2849E71
ZoneAlarmTrojan-PSW.Win32.Azorult.ajdk
MicrosoftTrojan:Win32/Wacatac.C!ml
ALYacSpyware.Infostealer.Azorult
Ad-AwareTrojan.GenericKD.42245745
CylanceUnsafe
PandaTrj/CI.A
ESET-NOD32a variant of Win32/Injector.Autoit.EWI
RisingTrojan.Obfus/Autoit!1.C075 (CLASSIC)
IkarusTrojan-Spy.Keylogger.AgentTesla
FortinetAutoIt/Injector.ESJ!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_60% (W)
MaxSecureTrojan.Malware.300983.susgen

How to remove Trojan-PSW.Win32.Azorult.ajdk?

Trojan-PSW.Win32.Azorult.ajdk removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment