Trojan

TrojanDropper.Sysn.r5 removal

Malware Removal

The TrojanDropper.Sysn.r5 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanDropper.Sysn.r5 virus can do?

  • Creates RWX memory
  • Reads data out of its own binary image
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine TrojanDropper.Sysn.r5?


File Info:

crc32: 6CDA9C12
md5: 2f37d959392400ac55c7f2d7c3a38197
name: batman-arkham-origins-em-portugues.exe
sha1: 943bede009ae9ec6a601262e3224a38030e34757
sha256: 1829ee228ddcea0ba0c2373e5a700595af9d8c31eff1e05aea84f53529062e61
sha512: 358b7eea1cbc5361bd2a1d910937bf3145eecccdf3c41d5a9f9783cd820ec24bf1d8589df959d5197f57d88a9e2ca035a945f6bffb36b082d126ec8ecde7b0b1
ssdeep: 49152:+XedaELeDMO5IZvWYraJNCEpqZvSgf9kfDgVox/DW:FdaELeD3mW80NCeUYg2x7W
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: 2015 - Tribo Gamer Brasilxae - Direitos Reservados
FileVersion: 1.00
CompanyName: Tribo Gamer Brasilxae
LegalTrademarks: Batman: Arkham Origins xe9 uma marca da WB Games. Nxf3s apenas traduzimos o jogo.
Comments: Distribuido pela Tribo Gamer Brasilxae
ProductName: Traduxe7xe3o do jogo: Batman: Arkham Origins
ProductVersion: 1.00
FileDescription: Batman: Arkham Origins Traduxe7xe3o BR 1.00
CompanyWebsite: http://www.tribogamer.com
Translation: 0x0409 0x04e4

TrojanDropper.Sysn.r5 also known as:

CAT-QuickHealTrojanDropper.Sysn.r5
ZillyaDropper.Sysn.Win32.4085
K7AntiVirusRiskware ( 0040eff71 )
K7GWRiskware ( 0040eff71 )
AgnitumTrojan.DR.Sysn!
SymantecTrojan.Gen
AvastWin32:Malware-gen
KasperskyUDS:DangerousObject.Multi.Generic
NANO-AntivirusTrojan.Win32.Sysn.dyjxvw
RisingPE:Malware.Generic/QRS!1.9E2D [F]
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R047C0PJV15
McAfee-GW-EditionRDN/Generic.hra
CyrenW32/Trojan.KPKW-7642
AviraTR/Agent.1784945
Antiy-AVLTrojan[Dropper]/Win32.Sysn
McAfeeArtemis!2F37D9593924
AVwareTrojan.Win32.Generic!BT
VBA32TrojanDropper.Sysn
IkarusTrojan.Win32.Refroso
FortinetW32/Sysn.BFXE!tr
Baidu-InternationalTrojan.Win32.Dropper.bfxe

How to remove TrojanDropper.Sysn.r5?

TrojanDropper.Sysn.r5 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment