Trojan

Trojan:MSIL/Azorult removal guide

Malware Removal

The Trojan:MSIL/Azorult is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:MSIL/Azorult virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz

How to determine Trojan:MSIL/Azorult?


File Info:

crc32: B3A95B80
md5: 05c9049d22766019c9eb218547220455
name: 05C9049D22766019C9EB218547220455.mlw
sha1: 765a788a72480a436fe17e192df7fbca96b309aa
sha256: 6b537580254d2bd30e25e9d8558ba9858dec9df94b2e98954f5c3f509dcf533d
sha512: 3c2aca9eb4907454050b6c46d1287f61cadcc45dd4b68fd08e9bacb813116de4a197403935e40948b9e8534ef651196a50e7a9a5e99c8a7e73bf05ae8bf5afd7
ssdeep: 384:pF0oqrmWk7iuqz8FadjscmEtddty8Wfa2zNay1h0wtShYWW5/Y:Mrz8ojsPEtdKP9tD0ESO8
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: Unreleased.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: Unreleased.exe

Trojan:MSIL/Azorult also known as:

K7AntiVirusTrojan ( 0056879b1 )
Elasticmalicious (high confidence)
DrWebTrojan.KillProc2.10336
CynetMalicious (score: 100)
CAT-QuickHealTrojanDownloader.MSIL
ALYacTrojan.GenericKDZ.66870
CylanceUnsafe
ZillyaDownloader.Small.Win32.130357
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanDownloader:MSIL/Seraph.44e88fc2
K7GWTrojan ( 0056879b1 )
Cybereasonmalicious.d22766
CyrenW32/MSIL_Troj.ABD.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/TrojanDownloader.Small.CEC
APEXMalicious
AvastWin32:PWSX-gen [Trj]
KasperskyHEUR:Trojan-Downloader.MSIL.Seraph.gen
BitDefenderTrojan.GenericKDZ.66870
NANO-AntivirusTrojan.Win32.Seraph.iouqnk
MicroWorld-eScanTrojan.GenericKDZ.66870
TencentMalware.Win32.Gencirc.1162cb59
Ad-AwareTrojan.GenericKDZ.66870
SophosMal/Generic-S
ComodoMalware@#1uh9j2x1kumfe
BitDefenderThetaGen:NN.ZemsilF.34170.cm2@aSXGPw
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionDownloader-FBZC!05C9049D2276
FireEyeGeneric.mg.05c9049d22766019
EmsisoftTrojan.GenericKDZ.66870 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojanDownloader.MSIL.vai
WebrootW32.Malware.Gen
AviraTR/Dropper.Gen
eGambitUnsafe.AI_Score_73%
Antiy-AVLTrojan/Generic.ASMalwS.305BABA
MicrosoftTrojan:MSIL/Azorult
GDataMSIL.Trojan-Downloader.Obfus.CQ
AhnLab-V3Malware/Win32.RL_Generic.C4083924
McAfeeDownloader-FBZC!05C9049D2276
MAXmalware (ai score=89)
VBA32TScope.Trojan.MSIL
MalwarebytesTrojan.Crypt.MSIL.Generic
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0DIP21
YandexTrojan.DL.Small!+Aa5h2xOPp8
IkarusTrojan-Downloader.MSIL.Small
MaxSecureTrojan.Malware.74570710.susgen
FortinetMSIL/Small.CEC!tr.dldr
AVGWin32:PWSX-gen [Trj]
Paloaltogeneric.ml

How to remove Trojan:MSIL/Azorult?

Trojan:MSIL/Azorult removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment