How to remove “Trojan.Win32.Scarsi.awvl”?

The Trojan.Win32.Scarsi.awvl is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Scarsi.awvl virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Hungarian
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.Win32.Scarsi.awvl?


File Info:
crc32: A4FA44E1
md5: 7fbe242d89cb52f689bea4126e97a33e
name: 7FBE242D89CB52F689BEA4126E97A33E.mlw
sha1: 87c4790dc030726806b264083a9d8de49c0648fe
sha256: c6e5156c311412210237810450648947699d1c4862536a4e86b778e899627292
sha512: eb0c07fc5f0fd71abb97b4f1de92f58b35657fcddf322be4d2cae9f2b9f8167b770aee4e2d9daf97722a6c4b797cff1e4ab524b2a538e7edb2f39d2d29e26346
ssdeep: 1536:OHzGAFWauXQviBcKxa64q+LpTaJlaLlUTS:5AVuXQviBBTd+LF
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x040e 0x04b0
InternalName: Coorgfluxiona
FileVersion: 4.00
CompanyName: FLuxOil
Comments: FLuxOil
ProductName: FLuxOil
ProductVersion: 4.00
OriginalFilename: Coorgfluxiona.exe

Trojan.Win32.Scarsi.awvl also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.PackedENT.202
MicroWorld-eScan	Gen:Variant.Razy.843298
FireEye	Generic.mg.7fbe242d89cb52f6
Qihoo-360	Win32/Packed.VBCrypt.HgIASPQA
McAfee	PWS-FCVE!7FBE242D89CB
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 00577f851 )
Alibaba	Trojan:Win32/Injector.16f1285e
K7GW	Trojan ( 00577f851 )
Arcabit	Trojan.Razy.DCDE22
BitDefenderTheta	Gen:NN.ZevbaCO.34574.gm0@aW0x4saG
Cyren	W32/VB.SS.gen!Eldorado
Symantec	Trojan Horse
APEX	Malicious
Avast	Win32:Trojan-gen
ClamAV	Win.Malware.Generic-9833026-0
Kaspersky	Trojan.Win32.Scarsi.awvl
BitDefender	Gen:Variant.Razy.843298
Paloalto	generic.ml
Tencent	Win32.Trojan.Scarsi.Ammw
Ad-Aware	Gen:Variant.Razy.843298
Sophos	Mal/Generic-S
Comodo	TrojWare.Win32.Agent.mfhzx@0
F-Secure	Trojan.TR/AD.VBCryptor.udtvm
McAfee-GW-Edition	BehavesLike.Win32.Trojan.cm
Emsisoft	Trojan.Injector (A)
SentinelOne	Static AI – Suspicious PE
Avira	TR/AD.VBCryptor.udtvm
Kingsoft	Win32.Troj.Scarsi.aw.(kcloud)
Gridinsoft	Trojan.Win32.Downloader.sa
Microsoft	TrojanDownloader:O97M/EncDoc.FE!MTB
ZoneAlarm	Trojan.Win32.Scarsi.awvl
GData	Gen:Variant.Razy.843298
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.RL_Generic.R366625
ALYac	Gen:Variant.Razy.843298
MAX	malware (ai score=86)
Malwarebytes	Generic.Malware/Suspicious
ESET-NOD32	a variant of Win32/Injector.EOOQ
TrendMicro-HouseCall	TROJ_GEN.R002H09BH21
Rising	Trojan.Injector!8.C4 (CLOUD)
Ikarus	Trojan.Win32.Injector
Fortinet	W32/Injector.EOOQ!tr
AVG	Win32:Trojan-gen
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_60% (W)

How to remove Trojan.Win32.Scarsi.awvl?

Trojan.Win32.Scarsi.awvl removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X