Should I remove “Win32:Agent-AZYK [Trj]”?

The Win32:Agent-AZYK [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32:Agent-AZYK [Trj] virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Behavioural detection: Injection (inter-process)
• Attempts to disable Windows Auto Updates
• Attempts to modify Explorer settings to prevent hidden files from being displayed

How to determine Win32:Agent-AZYK [Trj]?

File Info:
name: 46D018FE8C5F15E59765.mlw
path: /opt/CAPEv2/storage/binaries/4ba1a44742d06349f40e2b5eab53362eee3cb4b9f0d91719a13b101c14735df3
crc32: BFCC30B9
md5: 46d018fe8c5f15e597654ed041888cb5
sha1: d37fa07412f96004ab9900620497f44c0341ac35
sha256: 4ba1a44742d06349f40e2b5eab53362eee3cb4b9f0d91719a13b101c14735df3
sha512: 749d700df1bd34da2022ffbc259919578eb5309c750d999d05d771ef9b7d6409f0aeae04eb37d0eb1f754b23ecec43682f4cecbd1c11dde4e4682ae906ec883d
ssdeep: 3072:kkNTT8j6VlpvBd90i/SmWKLi7CjFSivnfu3fbMdozt5cz8m:kk0UGKGkFRKfeoztO
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AC344021A3C0FB3DE870C6F828554650886AAE335891DC17F6D2AB5A77B1E57F221373
sha3_384: 7844186683aa7c2d9fbf3cada7424ae6ffc4db7aa6500d1f2d82e95f3aca315c2fa22f61e20fbf679ee316eec5d07d64
ep_bytes: 68cc4f4000e8f0ffffff000000000000
timestamp: 1999-06-25 18:49:02

Version Info:
Translation: 0x0409 0x04b0
Comments: Gillette Cubocuneiform
CompanyName: Splanchnopleure Saman
FileDescription: Petaurine ubriaconi
LegalCopyright: identity
LegalTrademarks: Intagliavi justiceweed Bushrope
ProductName: piroplasmosis Proteroglypha Spinosotubercular
FileVersion: 6.07
ProductVersion: 6.07
InternalName: qdzmxzkljfhs
OriginalFilename: qdzmxzkljfhs.exe

Win32:Agent-AZYK [Trj] also known as:

How to remove Win32:Agent-AZYK [Trj]?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.