Malware

Win32/KuaiZip.N potentially unwanted removal tips

Malware Removal

The Win32/KuaiZip.N potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/KuaiZip.N potentially unwanted virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Expresses interest in specific running processes
  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Queries information on disks, possibly for anti-virtualization
  • Checks the version of Bios, possibly for anti-virtualization
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

Related domains:

pbstat.haotukankan.com

How to determine Win32/KuaiZip.N potentially unwanted?


File Info:

crc32: 74A252EC
md5: 9fcd1de8b96a7ddf0bdfdbad494e4708
name: haotu_v2.0.1.0_guanwang_10.exe
sha1: 79228310246173e51a8434f509f023bce1aeb550
sha256: 8dd5f3683bb5a3a0ab9f25dbc19ea2857674a8f8397b7a35c5dd91ce3e35c2ee
sha512: 875e6f488c2629e4dab257464d9b10c8a251d6760aa1e27dc471e7840f0c05790d9fb952691384503df9d25c116413b37923ba1d488a0f43522e45a8d3e5794e
ssdeep: 393216:fmUI9EaaSIug+cyUDg0VpE3xIaJEIyfLWURDXk2hUry6EKOq:+UI9EaaSZPcVD43xIaJOfqh2Krw+
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: (C) x9752x67a3x7f51x7edcx79d1x6280x6709x9650x516cx53f8 All Rights Reserved
InternalName: install.exe
CompanyShortName: x9752x67a3x7f51x7edc
FileVersion: 2.0.1.0
CompanyName: x9752x67a3x7f51x7edcx79d1x6280x6709x9650x516cx53f8
ProductShortName: x597dx56fex770bx770b
ProductName: x597dx56fex770bx770b
ProductVersion: 2.0.1.0
FileDescription: x597dx56fex770bx770bx5b89x88c5x5305
OriginalFilename: install.exe
Translation: 0x0409 0x04b0

Win32/KuaiZip.N potentially unwanted also known as:

MicroWorld-eScanGen:Variant.Graftor.674746
McAfeeGenericRXIX-TE!9FCD1DE8B96A
CylanceUnsafe
K7AntiVirusAdware ( 005096951 )
BitDefenderGen:Variant.Graftor.674746
K7GWAdware ( 005096951 )
ArcabitTrojan.Graftor.DA4BBA
TrendMicroTROJ_GEN.R002C0PJT19
BitDefenderThetaGen:NN.ZexaCO2.31176.@J2@a4WYnrjj
SymantecTrojan.Gen.MBT
TrendMicro-HouseCallTROJ_GEN.R002C0PJT19
AvastWin32:Trojan-gen
GDataGen:Variant.Graftor.674746
SophosGeneric PUA HJ (PUA)
DrWebProgram.Kuaizip.5
Invinceaheuristic
McAfee-GW-EditionGenericRXIX-TE!9FCD1DE8B96A
FireEyeGen:Variant.Graftor.674746
EmsisoftGen:Variant.Graftor.674746 (B)
CyrenW32/Trojan.PJZJ-0266
MAXmalware (ai score=87)
MicrosoftPUA:Win32/CoinMiner
ALYacGen:Variant.Graftor.674746
VBA32BScope.Adware.KuaiZip
PandaTrj/CI.A
ESET-NOD32a variant of Win32/KuaiZip.N potentially unwanted
RisingPUF.KuaiZip!8.2F40 (TFE:5:oNiTABSughD)
FortinetRiskware/KuaiZip
Ad-AwareGen:Variant.Graftor.674746
AVGWin32:Trojan-gen

How to remove Win32/KuaiZip.N potentially unwanted?

Win32/KuaiZip.N potentially unwanted removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment