Trojan

Should I remove “TrojanClicker.MasterZ”?

Malware Removal

The TrojanClicker.MasterZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanClicker.MasterZ virus can do?

  • Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • Uses Windows utilities for basic functionality
  • Reads data out of its own binary image
  • Authenticode signature is invalid
  • Uses suspicious command line tools or Windows utilities

How to determine TrojanClicker.MasterZ?


File Info:

name: 70028B45526712F0A0E2.mlw
path: /opt/CAPEv2/storage/binaries/9a7d4bdcf84cec14b83c9442bbc97aeac78429273bb313c70d5bc8f203be2b0a
crc32: 8F240AE4
md5: 70028b45526712f0a0e2e303c9832ad3
sha1: 59d669e7beae9d90d1cbd67a7422446bb85e80a4
sha256: 9a7d4bdcf84cec14b83c9442bbc97aeac78429273bb313c70d5bc8f203be2b0a
sha512: 693f13e85ded9b60a417b463bb246d3ece24b90bac9aea68203ad0fa2a342ae5d6ef7b32cf740f4a96b8ad47be923249c5ce99f47c89e025e1d5067de7c72ee8
ssdeep: 196608:oIOwfMKp3AN4Jzt4x7QC/lp+9xSH94pqWKCjagaGnDSO0uUXlYpVILJ8:oIEKp3g4ht4xSmHOqij0Gni+VI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FAB633A3D6C08163F9785835C49AE0C6563FB41B76F684FA1A87D84EF721B092F6184F
sha3_384: 00d9e64a12a201a3186e92af2ddde8fc4cf2f4984aa10443b1849e06e83e33fbfd46318aa40fb1649aece2382b1aedc1
ep_bytes: 81ecd4020000535556576a2033ed5e89
timestamp: 2010-04-10 12:19:31

Version Info:

FileDescription: 安装包
LegalCopyright: 版权所有 (C)
ProductName: 标准件
ProductVersion: 1.2.1.0
Translation: 0x0000 0x03a8

TrojanClicker.MasterZ also known as:

BkavW32.Common.BEF7D543
SkyhighArtemis
McAfeeArtemis!70028B455267
ZillyaTrojan.MasterZ.Win32.4
BitDefenderThetaGen:NN.ZexaCO.36744.SvX@aGLZTVni
KasperskyHEUR:Trojan-Clicker.Win32.MasterZ.gen
AvastWin32:Malware-gen
RisingAdware.MasterZ/NSIS!1.C12D (CLASSIC)
DrWebTrojan.MulDrop13.2988
JiangminTrojanClicker.MasterZ.c
ZoneAlarmHEUR:Trojan-Clicker.Win32.MasterZ.gen
VBA32TrojanClicker.MasterZ
Cylanceunsafe
AVGWin32:Malware-gen
DeepInstinctMALICIOUS

How to remove TrojanClicker.MasterZ?

TrojanClicker.MasterZ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment