Trojan

TrojanDropper:Win32/Systex!pz removal tips

Malware Removal

The TrojanDropper:Win32/Systex!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What TrojanDropper:Win32/Systex!pz virus can do?

  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine TrojanDropper:Win32/Systex!pz?



File Info:

name: 459437DDA085F067EB80.mlw
path: /opt/CAPEv2/storage/binaries/2a3778275befe58bbef9ac8f1a91e8f1af128216f81d89c2a35211bc2fa7a525
crc32: 2EDAE07F
md5: 459437dda085f067eb80969ca8bd39b7
sha1: 20e5a3fe289e6d8487caa3a0c8960946bab87868
sha256: 2a3778275befe58bbef9ac8f1a91e8f1af128216f81d89c2a35211bc2fa7a525
sha512: 9b9162c148b9fe769ddb3f0a09368370f129d7698459b95f629468652128897a7fb0826fa39ad1d9c043c42a127ab599c4500c445f299e79934d942f1e835d1c
ssdeep: 6144:jflfAL3jKlIJjiJcbI03GBc3ucY5DCSjXm/:jflfAL3bGjSGecvXm/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T103847C04BAA4F0F6DD95047804EBAF36967EB4281726CBC3E354CE5D99113C3A9346AF
sha3_384: 5eb6afc766159ae109fa6e25448aac57b53ad05235ad7dcfd6fbe5c9f512f0fc1efc5923bcf874896816427297f94389
ep_bytes: e8692f0000e979feffff8bff558bec81
timestamp: 2012-07-12 02:56:49


Version Info:

FileDescription: ....................请点击允许，拒绝将无法使用!!!!!!!!!!!!!!!!!!!!!!!!!!!
FileVersion: 1, 0, 0, 1
InternalName: help
LegalCopyright: Copyright (C) 2012
OriginalFilename: no
ProductName: 辅助 应用程序
ProductVersion: 1, 0, 0, 1
Translation: 0x0804 0x04b0

TrojanDropper:Win32/Systex!pz also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Daws.lIK3
Elasticmalicious (high confidence)
MicroWorld-eScanGeneric.Dacic.467A5BC0.A.E8557784
ClamAVWin.Malware.Mikey-9949492-0
FireEyeGeneric.mg.459437dda085f067
CAT-QuickHealTrojan.Mauvaise.SL1
McAfeeGenericRXAC-YK!459437DDA085
MalwarebytesGeneric.Malware.AI.DDS
ZillyaTrojan.Agent.Win32.3555942
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005a81c81 )
AlibabaTrojan:Win32/Systex.5725c716
K7GWTrojan ( 005a81c81 )
Cybereasonmalicious.e289e6
BitDefenderThetaAI:Packer.CD9383EC20
CyrenW32/Pleh.A.gen!Eldorado
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32Win32/Agent.PGA
APEXMalicious
CynetMalicious (score: 100)
KasperskyUDS:Trojan.Win32.GenericML.xnet
BitDefenderGeneric.Dacic.467A5BC0.A.E8557784
NANO-AntivirusTrojan.Win32.Mikey.jwwsog
AvastWin32:Agent-AUSD [Rtk]
TencentTrojan.Win32.Nthook.a
EmsisoftGeneric.Dacic.467A5BC0.A.E8557784 (B)
BaiduWin32.Rootkit.Agent.w
F-SecureTrojan.TR/Rogue.7909438
DrWebTrojan.Click2.32800
VIPREGeneric.Dacic.467A5BC0.A.E8557784
TrendMicroTROJ_GEN.R002C0DFH23
McAfee-GW-EditionBehavesLike.Win32.Generic.fh
Trapminemalicious.moderate.ml.score
SophosMal/Generic-R
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.PSE1.YSVY3N
JiangminTrojan/Invader.gje
AviraTR/Rogue.7909438
MAXmalware (ai score=100)
Antiy-AVLVirus/Win32.Expiro.ropf
XcitiumTrojWare.Win32.Clicker.naf@4qkqfk
ArcabitGeneric.Dacic.467A5BC0.A.E8557784
ZoneAlarmUDS:Trojan.Win32.GenericML.xnet
MicrosoftTrojanDropper:Win32/Systex!pz
GoogleDetected
AhnLab-V3Dropper/Win.YK.C5284538
Acronissuspicious
VBA32Rootkit.Agent
ALYacGeneric.Dacic.467A5BC0.A.E8557784
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0DFH23
RisingTrojan.Agent!1.C16F (CLASSIC)
YandexTrojan.GenAsa!fCPsWhzUnE4
IkarusTrojan.SuspectCRC
MaxSecureDropper.Daws.aumx
FortinetW32/Wacatac.B!tr
AVGWin32:Agent-AUSD [Rtk]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove TrojanDropper:Win32/Systex!pz?

TrojanDropper:Win32/Systex!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment