Trojan

Trojan.Win32.Staser.cxiz removal instruction

Malware Removal

The Trojan.Win32.Staser.cxiz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Staser.cxiz virus can do?

  • Creates RWX memory
  • A process attempted to delay the analysis task by a long amount of time.
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Win32.Staser.cxiz?


File Info:

crc32: C96C395C
md5: 1fae0e21713ed8db63449b0c888c4b37
name: 4truRshHJ9KIZv.exe
sha1: 47246ba57ec68458651fc29aa3efd25d25f593ca
sha256: 77f64ad0f42de2c10cdd5e9421f9090e0a7bfbe08ceb3599c543eaca4879cdb2
sha512: a0692f3380bb94221a78a4f3912e4f720fbaa29f585c66a7a858ef4242d9774dcc74f45747bf218622542842e5a2141b13d77fe0218a84c80dbb0cb65e24633e
ssdeep: 6144:Gm8aWfKWVkcLuvQuTxHfSpIkGeHnVFtPjPZ/Kr:/8JVkcLuvZTdKpvpZ/s
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright 2003
InternalName: ATLUtils
FileVersion: 1, 0, 0, 1
ProductName: ATLUtils Module
ProductVersion: 1, 0, 0, 1
FileDescription: ATLUtils Module
OriginalFilename: ATLUtils.EXE
Translation: 0x0409 0x04b0

Trojan.Win32.Staser.cxiz also known as:

MicroWorld-eScanTrojan.Autoruns.GenericKDS.42275593
McAfeeRDN/Emotet
VIPRETrojan.Win32.Generic!BT
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderTrojan.Autoruns.GenericKDS.42275593
K7GWRiskware ( 0040eff71 )
F-ProtW32/Agent.BNA.gen!Eldorado
SymantecTrojan Horse
ESET-NOD32a variant of Win32/Kryptik.HALR
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Trojan.Emotet-7555539-0
KasperskyTrojan.Win32.Staser.cxiz
NANO-AntivirusVirus.Win32.Gen.ccmw
RisingTrojan.Kryptik!8.8 (CLOUD)
Ad-AwareTrojan.Autoruns.GenericKDS.42275593
EmsisoftTrojan.Emotet (A)
F-SecureTrojan.TR/AD.Emotet.gqbhy
DrWebTrojan.DownLoader32.51703
TrendMicroTrojanSpy.Win32.EMOTET.SMD6.hp
McAfee-GW-EditionBehavesLike.Win32.Ransom.gh
Trapminemalicious.moderate.ml.score
FireEyeTrojan.Autoruns.GenericKDS.42275593
SophosMal/Generic-S
CyrenW32/Agent.BNA.gen!Eldorado
WebrootW32.Trojan.Dropper
AviraTR/AD.Emotet.gqbhy
MAXmalware (ai score=86)
Endgamemalicious (moderate confidence)
ArcabitTrojan.Autoruns.GenericS.D2851309
ZoneAlarmTrojan.Win32.Staser.cxiz
MicrosoftTrojan:Win32/Emotet.ARJ!MTB
AhnLab-V3Malware/Win32.Trojanspy.C3932229
ALYacTrojan.GenericKD.32975018
TrendMicro-HouseCallTrojanSpy.Win32.EMOTET.SMD6.hp
IkarusTrojan-Banker.Emotet
GDataTrojan.Autoruns.GenericKDS.42275593
BitDefenderThetaGen:NN.ZexaF.34084.Aq1@a8oY5adi
PandaTrj/Emotet.A
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan.Win32.Staser.cxiz?

Trojan.Win32.Staser.cxiz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment