Trojan

Should I remove “Trojan.Uztuby.12”?

Malware Removal

The Trojan.Uztuby.12 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Uztuby.12 virus can do?

  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Executed a process and injected code into it, probably while unpacking
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs

How to determine Trojan.Uztuby.12?


File Info:

crc32: AD22E9BD
md5: 378c74d8462ab36f3b84d7bc3d7b13ab
name: 378C74D8462AB36F3B84D7BC3D7B13AB.mlw
sha1: c163ccd795aaa0d3c195a13c9c325c1b07831ee4
sha256: 477f84cdd4b8600dbad0767d9dada2b6565decb5a8b4fc369f72df0b1fcbe24d
sha512: 1083454f5495c0a5a59490e73721d344705e1a084a79ca6764de91196b85a7b3d45398746951c235e01d56186d1ec5321d8b31263bad7d0191ae5b0e7a48e003
ssdeep: 24576:Lrrd8Vnt8jtWoJpXWHALGX+C1Co3aP8jvuC7g6zwm4m53Sb21SR:xXsSGuC/MIvuC5kFm53Sy1SR
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Uztuby.12 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Uztuby.12
FireEyeGeneric.mg.378c74d8462ab36f
CAT-QuickHealTrojan.Generic.A
ALYacTrojan.Uztuby.12
CylanceUnsafe
BitDefenderTrojan.Uztuby.12
Cybereasonmalicious.8462ab
BitDefenderThetaAI:Packer.02B7448F15
SymantecTrojan.Gen.MBT
APEXMalicious
ClamAVWin.Trojan.Autoit-6922942-0
KasperskyTrojan.Win32.Autoit.fgu
NANO-AntivirusTrojan.Text.Agent.emwasc
Ad-AwareTrojan.Uztuby.12
ComodoMalware@#k0gk9pf6wyai
F-SecureDropper.DR/AutoIt.Gen
InvinceaML/PE-A
EmsisoftTrojan.Uztuby.12 (B)
IkarusTrojan.Win32.Injector
AviraDR/AutoIt.Gen
ArcabitAIT:Trojan.Nymeria.12
ZoneAlarmTrojan.Win32.Autoit.fgu
GDataScript.Trojan.Agent.H9PHRW
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Autoit.C1814451
McAfeeArtemis!378C74D8462A
MalwarebytesSpyware.HawkEyeKeyLogger
ZonerProbably Heur.RARAutorun
ESET-NOD32multiple detections
MAXmalware (ai score=82)
AVGAutoIt:Agent-ANY [Trj]
Qihoo-360QVM06.1.Malware.Gen

How to remove Trojan.Uztuby.12?

Trojan.Uztuby.12 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment