Categories: Trojan

Should I remove “Trojan-PSW.Win32.Azorult.aldq”?

The Trojan-PSW.Win32.Azorult.aldq is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-PSW.Win32.Azorult.aldq virus can do?

Executable code extraction
Creates RWX memory
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Trojan-PSW.Win32.Azorult.aldq?


File Info:
crc32: 32391145md5: 7e5e94bbb33209749d104bae7406c900name: bz.exesha1: 675b49433a69aad512397c06bb654ce9c81f01fbsha256: cbf2c9263616a8209e2b82155392784bab933c7148361a7996bb553a0eb900e0sha512: e83bf8009e120920403c379485ceb804db50ed550b58efba5e53e5858f8368eaf9af75ce314f69ab4988b8baf8ea59b5bc13f7c7699aeb4e0d14ad4da7a31b38ssdeep: 24576:oAHnh+eWsN3skA4RV1Hom2KXSmdafpFNS6dw8tAze6FBnCUtj5:vh+ZkldoPKi2afnezFBnCitype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0809 0x04b0

Trojan-PSW.Win32.Azorult.aldq also known as:

MicroWorld-eScan	AIT:Trojan.Nymeria.2968
FireEye	Generic.mg.7e5e94bbb3320974
Qihoo-360	Win32/Trojan.PSW.5cd
McAfee	Artemis!7E5E94BBB332
Cylance	Unsafe
AegisLab	Trojan.Win32.Nymeria.4!c
Sangfor	Malware
K7AntiVirus	Trojan ( 005604201 )
BitDefender	AIT:Trojan.Nymeria.2968
K7GW	Trojan ( 005604201 )
Cybereason	malicious.33a69a
Invincea	heuristic
F-Prot	W32/Autoit.G.gen!Eldorado
Symantec	Packed.Generic.548
ESET-NOD32	a variant of Win32/Injector.Autoit.FBN
APEX	Malicious
Avast	Win32:Malware-gen
GData	AIT:Trojan.Nymeria.2968
Kaspersky	Trojan-PSW.Win32.Azorult.aldq
Alibaba	Trojan:Win32/Predator.ce855617
Tencent	Win32.Trojan.Agent.Auto
Emsisoft	AIT:Trojan.Nymeria.2968 (B)
F-Secure	Trojan.TR/AD.MoksSteal.mnahj
TrendMicro	TROJ_GEN.R020C0TBA20
McAfee-GW-Edition	BehavesLike.Win32.Downloader.tc
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
Ikarus	Trojan-Spy.HawkEye
Cyren	W32/Autoit.G.gen!Eldorado
Webroot	W32.Trojan.Nymeria
Avira	TR/AD.MoksSteal.mnahj
Endgame	malicious (high confidence)
Arcabit	AIT:Trojan.Nymeria.DB98
ZoneAlarm	Trojan-PSW.Win32.Azorult.aldq
Microsoft	Trojan:Win32/Predator.BC!MTB
AhnLab-V3	Trojan/AU3.Wacatac.S1079
Acronis	suspicious
MAX	malware (ai score=89)
Malwarebytes	Trojan.MalPack.AutoIt
TrendMicro-HouseCall	TROJ_GEN.R020C0TBA20
Rising	Trojan.Obfus/Autoit!1.C075 (CLASSIC)
Yandex	Trojan.AvsArher.bS9LKk
eGambit	Unsafe.AI_Score_99%
Fortinet	AutoIt/Injector.EZY!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_80% (W)
MaxSecure	Trojan.Malware.300983.susgen