Trojan

Trojan-PSW.Win32.Racealer.jzw malicious file

Malware Removal

The Trojan-PSW.Win32.Racealer.jzw is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-PSW.Win32.Racealer.jzw virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (4 unique times)
  • Creates RWX memory
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Norwegian (Nynorsk)
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
telete.in
apps.identrust.com

How to determine Trojan-PSW.Win32.Racealer.jzw?


File Info:

crc32: 0D8CDAC4
md5: 3aaef1dac507a2c62a8a35420bba366e
name: 3AAEF1DAC507A2C62A8A35420BBA366E.mlw
sha1: 2c2f47e1e05203c852646a44a7ed420ad9ea5afa
sha256: 44bc9b5ec0d573cb94869694eb76a9f9b50e35d2c678b42069d5fb4a014d9da6
sha512: 89219034c4b5b2f6c94ec2b10175358cb97653217c4e647210a6e2c9f1100b5eddab16ded7e274c680645846b3ebcfe03004e193e840c3bda0b305ac001b921e
ssdeep: 12288:3aPCGxIKAKXD0sfE90Ac5ddGac27GNR/Cy+l9:PaosfEyJGJGG3Kf9
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

InternalName: triwilbifog.acs
FileVersion: 6.26.361
Copyright: Copyrighz (C) 2020, vodkafug
ProductVersion: 1.0.5
TranslationUsa: 0x0273 0x04d3

Trojan-PSW.Win32.Racealer.jzw also known as:

K7AntiVirusTrojan ( 005757651 )
LionicTrojan.Win32.Racealer.i!c
Elasticmalicious (high confidence)
CAT-QuickHealTrojanpws.Racealer
McAfeeArtemis!3AAEF1DAC507
CylanceUnsafe
SangforMalware
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojanPSW:Win32/Racealer.173dc927
K7GWTrojan ( 005757651 )
Cybereasonmalicious.ac507a
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HIPJ
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
CynetMalicious (score: 100)
KasperskyTrojan-PSW.Win32.Racealer.jzw
BitDefenderTrojan.GenericKD.45256991
MicroWorld-eScanTrojan.GenericKD.45256991
TencentWin32.Trojan-qqpass.Qqrob.Lmli
Ad-AwareTrojan.GenericKD.45256991
SophosMal/Generic-S
F-SecureHeuristic.HEUR/AGEN.1140248
BitDefenderThetaGen:NN.ZexaF.34760.HmKfa0GAVIhG
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R004C0DA421
McAfee-GW-EditionBehavesLike.Win32.RansomGandCrab.hc
FireEyeGeneric.mg.3aaef1dac507a2c6
EmsisoftTrojan.GenericKD.45256991 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1140248
eGambitUnsafe.AI_Score_96%
MicrosoftTrojan:Win32/Glupteba.NV!MTB
ArcabitTrojan.Generic.D2B2911F
ZoneAlarmTrojan-PSW.Win32.Racealer.jzw
GDataTrojan.GenericKD.45256991
AhnLab-V3Malware/Win32.RL_Generic.R361497
VBA32BScope.Trojan.Glupteba
MAXmalware (ai score=85)
MalwarebytesTrojan.MalPack.GS
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R004C0DA421
RisingTrojan.Kryptik!1.CFEE (CLASSIC)
YandexTrojan.PWS.Racealer!kEPrcPe69wc
IkarusWorm.Win32.Peerfrag
FortinetW32/Kryptik.HIFA!tr
AVGWin32:TrojanX-gen [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.PSW.119

How to remove Trojan-PSW.Win32.Racealer.jzw?

Trojan-PSW.Win32.Racealer.jzw removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment