Trojan

What is “Trojan:Win32/Godzilia.A”?

Malware Removal

The Trojan:Win32/Godzilia.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Godzilia.A virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (2 unique times)
  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • Uses Windows utilities for basic functionality
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Installs itself for autorun at Windows startup
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Uses suspicious command line tools or Windows utilities

Related domains:

spotsbill.com
timerstern.com
twitter.com

How to determine Trojan:Win32/Godzilia.A?


File Info:

crc32: 85640236
md5: 72fa0c8b107758e30d63f0147a3ecd55
name: 72FA0C8B107758E30D63F0147A3ECD55.mlw
sha1: 1585ce5ef6462a4bf305733ea8a65febb0b0e478
sha256: f17c67d325bdf102a3fd75b3320f9981b2e9bf6b89e7a1c105b74c8853b337e9
sha512: b2fea8213d8901a899444a45268cac23eaaee56cf18967fede4337287de2a94960376afd47dcac2fa7b3de41e3c8632ab8e4ff6e366b518af8c1cc34d65ecc48
ssdeep: 1536:xMxxJZkisw/bTxdggLKGBn/hs5J/s/Wk9GS6rJ7:xUxJZkisw/bTxdg6HBn/hPGS6l7
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan:Win32/Godzilia.A also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Agiala.24
FireEyeGeneric.mg.72fa0c8b107758e3
CAT-QuickHealRansom.Exxroute.A3
McAfeeRansomware-FMJ!72FA0C8B1077
CylanceUnsafe
AegisLabTrojan.Win32.Godzilla.a!c
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005137001 )
BitDefenderGen:Variant.Agiala.24
K7GWTrojan ( 005137001 )
Cybereasonmalicious.b10775
BitDefenderThetaGen:NN.ZexaF.34590.kmW@aGtB0Pei
CyrenW32/Ransom.CR.gen!Eldorado
SymantecPacked.Generic.493
APEXMalicious
AvastWin32:Trojan-gen
KasperskyHEUR:Trojan.Win32.Generic
NANO-AntivirusTrojan.Win32.Encoder.evdcia
TencentMalware.Win32.Gencirc.11494ff2
Ad-AwareGen:Variant.Agiala.24
EmsisoftGen:Variant.Agiala.24 (B)
ComodoTrojWare.Win32.Crypt.C@7vajd0
F-SecureTrojan.TR/Crypt.XPACK.Gen7
DrWebTrojan.Encoder.7458
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_CERBER.SM37
McAfee-GW-EditionBehavesLike.Win32.Ransomware.cz
SophosML/PE-A + Mal/Elenoocka-E
IkarusTrojan-Ransom.Cerber
JiangminTrojanDownloader.Godzilla.m
eGambitUnsafe.AI_Score_99%
AviraTR/Crypt.XPACK.Gen7
Antiy-AVLTrojan/Win32.AGeneric
MicrosoftTrojan:Win32/Godzilia.A
ArcabitTrojan.Agiala.24
SUPERAntiSpywareRansom.Cryptor/Variant
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Variant.Agiala.24
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Cerber.C1768123
Acronissuspicious
VBA32BScope.TrojanSpy.Ursnif
ALYacGen:Variant.Agiala.24
MAXmalware (ai score=88)
MalwarebytesCerber.Ransom.Encrypt.DDS
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Kryptik.FNTK
TrendMicro-HouseCallRansom_CERBER.SM37
RisingTrojan.Generic@ML.100 (RDMK:PVEXU6YyXUUDvv12qil3DQ)
YandexTrojan.GenAsa!vXdQ0BSaoxM
SentinelOneStatic AI – Suspicious PE
FortinetW32/GenKryptik.APXF!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360Win32/Trojan.8e4

How to remove Trojan:Win32/Godzilia.A?

Trojan:Win32/Godzilia.A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment