Trojan.Win32.Scar.syzh information

The Trojan.Win32.Scar.syzh is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Scar.syzh virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (4 unique times)
Creates RWX memory
A process attempted to delay the analysis task.
Performs some HTTP requests
Unconventionial language used in binary resources: Latvian
The binary likely contains encrypted or compressed data.
Attempts to repeatedly call a single API many times in order to delay analysis time
Attempts to identify installed AV products by installation directory
Checks the CPU name from registry, possibly for anti-virtualization
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

iplogger.org

apps.identrust.com

filelss08.top

How to determine Trojan.Win32.Scar.syzh?


File Info:
crc32: 85C5BA94
md5: f2871a811dcf68312232f5535f2cde81
name: tmpf64413df
sha1: 3253dbf2606859f366ff76eba03d752d2335182d
sha256: fd3538c533c12698cd113cadc2e570d951f6dc258e8be3115855a1d2fc81128a
sha512: a3ec5fb1d9ca166e5a584f692b7a5b9f0b1ab3ceb9b44a1a9a7a6085b44a75ae4dd487f0d41a1b08d1ff0003810b5e6a887eba7676bf9b79ade4627cb39d0dfa
ssdeep: 12288:wXA45DcpG5EdlnQeCOLXXr4QZNnsXYxy/hWq8u6Epz:w9aG6gMLHDZ5so2TZjpz
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
InternalName: osf3xswgesv.ixi
FileVersionOld: 1.2.0.1
ProductVersion: 1.0.4.1
Copyrighd: Copyrighd (C) 2020, odfgbiv
Translation: 0x0842 0x04c4

Trojan.Win32.Scar.syzh also known as:

Bkav	HW32.Packed.
MicroWorld-eScan	Trojan.GenericKD.34038724
FireEye	Generic.mg.f2871a811dcf6831
McAfee	Packed-GBO!F2871A811DCF
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Adware ( 004f4a0a1 )
BitDefender	Trojan.GenericKD.34038724
K7GW	Adware ( 004f4a0a1 )
Cybereason	malicious.260685
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
GData	Trojan.GenericKD.34038724
Kaspersky	Trojan.Win32.Scar.syzh
Endgame	malicious (high confidence)
Emsisoft	Trojan.GenericKD.34038724 (B)
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Backdoor.jc
Sophos	Mal/GandCrab-G
Webroot	W32.Trojan.Gen
MAX	malware (ai score=82)
Microsoft	Trojan:Win32/Wacatac.C!ml
Arcabit	Trojan.Generic.D20763C4
ZoneAlarm	Trojan.Win32.Scar.syzh
Cynet	Malicious (score: 100)
Acronis	suspicious
VBA32	BScope.Trojan.AET.281105
Malwarebytes	Trojan.MalPack.GS
ESET-NOD32	Win32/TrojanDownloader.AutoHK.KK
Rising	Malware.Heuristic!ET#89% (RDMK:cmRtazqpv5sz2Hv6c66ldGuAEmjG)
SentinelOne	DFI – Malicious PE
Fortinet	W32/Kryptik.HEDU!tr
Ad-Aware	Trojan.GenericKD.34038724
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	HEUR/QVM10.1.FCB8.Malware.Gen

How to remove Trojan.Win32.Scar.syzh?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Win32.Scar.syzh information