Trojan

About “TrojanDownloader:Win32/Caxnet!rfn” infection

Malware Removal

The TrojanDownloader:Win32/Caxnet!rfn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanDownloader:Win32/Caxnet!rfn virus can do?

  • Reads data out of its own binary image
  • Drops a binary and executes it
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Creates an autorun.inf file
  • Anomalous binary characteristics

Related domains:

www.522983.cn

How to determine TrojanDownloader:Win32/Caxnet!rfn?


File Info:

crc32: C92175E0
md5: e080223f4339dff847ca420193144e5f
name: laserjet-1020.exe
sha1: 0ed9e5f8dcff018e29df3639e5ce438de80fc469
sha256: cc2d710391f026ee28cc29d52d7e2da1e94a60515264f272f8211dbab530bf06
sha512: 5ff143955ea05702252eb733ebc041ac596aa6555769f0d88b471cd5441b424fdb9ab02b7f056c4c5c2dcac11af233ed3011d8e2ef8600fe6adf1a903dab83ea
ssdeep: 393216:yYFl6E74ISKv4wIhXwuCXntTe11pWvxC9qlU4KDl:yel61K4wIVwzAIpxFKR
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

TrojanDownloader:Win32/Caxnet!rfn also known as:

MicroWorld-eScanTrojan.GenericKD.3816764
CMCTrojan-Downloader.Win32.Selvice!O
CAT-QuickHealTrojan.Caxnet.B
McAfeeArtemis!E080223F4339
VIPRETrojan.Win32.Generic.pak!cobra
AegisLabTrojan.Multi.Generic.lsow
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderTrojan.GenericKD.3816764
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.f4339d
BaiduWin32.Rootkit.Koutodoor.a
SymantecTrojan Horse
AvastWin32:Caxnet [Trj]
ClamAVWin.Downloader.Caxnet-18
GDataTrojan.GenericKD.3816764
KasperskyHEUR:Trojan.Win32.Generic
AlibabaTrojanDownloader:Win32/Caxnet.ff444c82
NANO-AntivirusTrojan.Win32.Bifrose.czgim
Endgamemalicious (high confidence)
SophosMal/Generic-S
ComodoTrojWare.Win32.Koutdoor.HR@4ri74j
F-SecureTrojan.TR/Crypt.ZPACK.Gen
DrWebTrojan.DownLoad2.16451
ZillyaDownloader.Selvice.Win32.745
TrendMicroTROJ_CAXNET.SMF
McAfee-GW-EditionBehavesLike.Win32.Dropper.wc
FireEyeGeneric.mg.e080223f4339dff8
EmsisoftTrojan.GenericKD.3816764 (B)
IkarusTrojan-Downloader.Win32.Selvice
JiangminTrojan/JunkCode.Gen
WebrootW32.Malware.Downloader
AviraTR/Dropper.Gen
MAXmalware (ai score=99)
ArcabitTrojan.Generic.D3A3D3C
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftTrojanDownloader:Win32/Caxnet!rfn
ALYacTrojan.GenericKD.3816764
VBA32TrojanDownloader.Selvice
CylanceUnsafe
PandaTrj/CI.A
ESET-NOD32a variant of Generik.MTLVVQS
TrendMicro-HouseCallTROJ_CAXNET.SMF
RisingTrojan.Generic@ML.98 (RDMK:VlxSOWUxqVPGOVFS0hjLbg)
YandexTrojan.DL.Selvice!ndCin5ZHNgQ
MaxSecureTrojan.Malware.1910744.susgen
FortinetW32/BRV.XL!tr.dldr
Ad-AwareTrojan.GenericKD.3816764
AVGWin32:Caxnet [Trj]
CrowdStrikewin/malicious_confidence_80% (W)
Qihoo-360Win32/Trojan.8db

How to remove TrojanDownloader:Win32/Caxnet!rfn?

TrojanDownloader:Win32/Caxnet!rfn removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment