Ransom Trojan

About “Trojan-Ransom.Win32.Agent.avzu” infection

Malware Removal

The Trojan-Ransom.Win32.Agent.avzu is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Agent.avzu virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan-Ransom.Win32.Agent.avzu?


File Info:

crc32: 433A57A0
md5: e3648731a36105980f5fae6b4afe614b
name: officeupd.fft
sha1: 85db743d14fbd83f893ec34dbdf57d0344e16156
sha256: 877c735650488f81807239a0ca564c8faa660a8c9141a9aba2049b9fe1d5b2fb
sha512: dcf4742b7c059f4580d9bbee1c5e444eb37bc1ab4c183bb7697ac33cc8d74a2d2ad9016ba1dc6429deb31d7fc1cd101d3544806411682d49147b4fc08b0eea2f
ssdeep: 12288:3qhfOhBJUmIa4cQ5VSdQpRSZZLPwPqnk7HLhPQ9dLz6D:I9dXrEEw/PwP4k71I9dLz6D
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-Ransom.Win32.Agent.avzu also known as:

McAfeeArtemis!E3648731A361
MalwarebytesTrojan.Injector
AegisLabTrojan.Win32.Malicious.4!c
Cybereasonmalicious.d14fbd
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GYWN
APEXMalicious
KasperskyTrojan-Ransom.Win32.Agent.avzu
RisingTrojan.Generic@ML.93 (RDMK:rUN0MZOa0Bol/tTHexDcew)
SophosMal/Generic-S
DrWebTrojan.Encoder.30215
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.tt
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.e3648731a3610598
IkarusTrojan.Win32.Inject
WebrootW32.Adware.Gen
Endgamemalicious (high confidence)
ZoneAlarmTrojan-Ransom.Win32.Agent.avzu
MicrosoftTrojan:Win32/Fuerboos.C!cl
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.32515.fvW@a0xk7!di
SentinelOneDFI – Malicious PE
AVGFileRepMalware
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360HEUR/QVM19.1.81F7.Malware.Gen

How to remove Trojan-Ransom.Win32.Agent.avzu?

Trojan-Ransom.Win32.Agent.avzu removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment