Trojan

How to remove “Trojan:Win32/Azorult!pz”?

Malware Removal

The Trojan:Win32/Azorult!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Azorult!pz virus can do?

  • Sample contains Overlay data
  • Authenticode signature is invalid

How to determine Trojan:Win32/Azorult!pz?


File Info:

name: 8FC6A41A18109EADCC51.mlw
path: /opt/CAPEv2/storage/binaries/3c55418dc14f579dcdee96dfd601a6f5157923333b925def4ef5d47db0dd3ecd
crc32: EB0A2797
md5: 8fc6a41a18109eadcc51fbc2db4dd52b
sha1: 776e6a98ce68880c122addb4d60dd232918e003d
sha256: 3c55418dc14f579dcdee96dfd601a6f5157923333b925def4ef5d47db0dd3ecd
sha512: 90d246ff6fcabefd654cd4da22c56d4bdd352a1b47137578100b09c86481773426d1c14aa1f64bf6278b220dfb6297e18f6b981021a6116c97059c04b9d7a59f
ssdeep: 24576:Wu6J33O0c+JY5UZ+XC0kGsoTacbl6u2iN:4u0c++OCvkGsEacJ67g
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T126159D22B3DDC360CB669173BF69B3056EBB7C650630B85B2F980D3DA960171162D7A3
sha3_384: de138307256a979c2307355f4dcaccdce4877455fc43ff7d2ddee77cefa9f17d1c9788cbea8bdca75b5a0c2fed16f7b9
ep_bytes: e8b5d00000e97ffeffffcccccccccccc
timestamp: 2019-05-14 14:55:21

Version Info:

Translation: 0x0809 0x04b0

Trojan:Win32/Azorult!pz also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.AutoIt.4!c
Elasticmalicious (high confidence)
DrWebTrojan.AutoIt.426
MicroWorld-eScanTrojan.GenericKD.65866325
FireEyeGeneric.mg.8fc6a41a18109ead
CAT-QuickHealTrojan.AutoIT.Injector.A
SkyhighBehavesLike.Win32.TrojanAitInject.ch
McAfeeTrojan-AitInject.aq
Cylanceunsafe
VIPRETrojan.GenericKD.65866325
SangforVirus.Win32.Save.a
K7AntiVirusTrojan ( 0055dc781 )
BitDefenderTrojan.GenericKD.65866325
K7GWTrojan ( 0055dc781 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaAI:Packer.39DE3CF819
SymantecAUT.Heuristic!gen5
tehtrisGeneric.Malware
ESET-NOD32Win32/Packed.Autoit.NBC suspicious
APEXMalicious
KasperskyHEUR:Trojan.Win32.AutoIt.gen
AlibabaTrojan:Win32/AutoitCrypt.180
RisingPUF.Pack-AutoIt!1.B8E7 (CLASSIC)
SophosTroj/AutoIt-CLG
GoogleDetected
F-SecureDropper.DR/AutoIt.Gen8
TrendMicroTrojan.AutoIt.CRYPTINJECT.SMA
Trapminesuspicious.low.ml.score
EmsisoftTrojan.GenericKD.65866325 (B)
SentinelOneStatic AI – Malicious PE
WebrootW32.Malware.gen
VaristW32/AutoIt.QF.gen!Eldorado
AviraDR/AutoIt.Gen8
MAXmalware (ai score=84)
Antiy-AVLGrayWare/Autoit.ShellCode.a
Kingsoftmalware.kb.a.999
MicrosoftTrojan:Win32/Azorult!pz
ArcabitTrojan.Generic.D3ED0A55
ZoneAlarmHEUR:Trojan.Win32.Convagent.gen
GDataTrojan.GenericKD.65866325
CynetMalicious (score: 100)
AhnLab-V3Win-Trojan/AutoInj.Exp
Acronissuspicious
ALYacTrojan.GenericKD.65866325
DeepInstinctMALICIOUS
VBA32Trojan.Autoit
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
TrendMicro-HouseCallTrojan.AutoIt.CRYPTINJECT.SMA
TencentTrojan.Win32.Agent.hfw
IkarusTrojan.Win32.Autoit
MaxSecureTrojan.Malware.300983.susgen
FortinetAutoIt/Injector.ESJ!tr
AVGAutoIt:Injector-JF [Trj]
Cybereasonmalicious.8ce688
AvastAutoIt:Injector-JF [Trj]

How to remove Trojan:Win32/Azorult!pz?

Trojan:Win32/Azorult!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment