In this post, I am going to clarify how the Masson trojan infused into your computer, as well as how to clear away Masson trojan virus.
What is Masson trojan?
Name | Masson |
Infection Type | Trojan |
Symptoms |
|
Similar behavior | Obfuse, EncDoc, Zloader, Caynamer, Bomitag, Qakbot |
Fix Tool | See If Your System Has Been Affected by Masson trojan |
Trojan viruses are one of the leading malware kinds by its injection frequency for quite a very long time. And currently, during the pandemic, when malware became immensely active, trojan viruses increased their activity, too. You can see a number of messages on various websites, where people are complaining about the Masson trojan virus in their computers, and asking for help with Masson trojan virus removal.
Trojan Masson is a sort of virus that infiltrates into your personal computer, and after that executes a wide range of destructive features. These functions rely on a type of Masson trojan: it might serve as a downloader for many other malware or as a launcher for an additional destructive program which is downloaded together with the Masson trojan. Throughout the last 2 years, trojans are also dispersed via email add-ons, and in the majority of situations utilized for phishing or ransomware infiltration.
Masson2 also known as
Bkav | W32.AIDetectVM.malware1 |
Elastic | malicious (high confidence) |
MicroWorld-eScan | Trojan.GenericKD.34820886 |
Qihoo-360 | Win32/Trojan.716 |
McAfee | Emotet-FSF!3BDFEFF951F0 |
AegisLab | Trojan.Win32.Zenpak.4!c |
K7AntiVirus | Trojan ( 0057149c1 ) |
BitDefender | Trojan.GenericKD.34820886 |
K7GW | Trojan ( 0057149c1 ) |
Arcabit | Trojan.Generic.D2135316 |
Invincea | Mal/Generic-S |
Symantec | Trojan.Gen.2 |
APEX | Malicious |
Paloalto | generic.ml |
Kaspersky | HEUR:Trojan.Win32.Zenpak.gen |
Alibaba | Trojan:Win32/Kryptik.ab17e437 |
Rising | Trojan.Kryptik!1.CD97 (CLASSIC) |
Ad-Aware | Trojan.GenericKD.34820886 |
Emsisoft | Trojan.GenericKD.34820886 (B) |
Comodo | TrojWare.Win32.Genome.pkuag@0 |
F-Secure | Trojan.TR/Crypt.Agent.kuuyw |
DrWeb | Trojan.Encoder.32888 |
McAfee-GW-Edition | BehavesLike.Win32.Emotet.gc |
FireEye | Generic.mg.3bdfeff951f060b7 |
Sophos | Mal/Generic-S |
Webroot | W32.Trojan.Gen |
Avira | TR/Crypt.Agent.kuuyw |
MAX | malware (ai score=81) |
Microsoft | Trojan:Win32/Masson.A!ac |
ZoneAlarm | HEUR:Trojan.Win32.Zenpak.gen |
GData | Trojan.GenericKD.34820886 |
Cynet | Malicious (score: 90) |
VBA32 | BScope.Trojan.Downloader |
ALYac | Trojan.Ransom.Conti |
Malwarebytes | Trojan.MalPack.TRE |
ESET-NOD32 | a variant of Win32/Kryptik.HGUR |
TrendMicro-HouseCall | TROJ_GEN.R002H06JJ20 |
Ikarus | Trojan.Win32.Crypt |
eGambit | Unsafe.AI_Score_97% |
Fortinet | W32/BankerX.5CC7!tr |
BitDefenderTheta | Gen:NN.ZexaF.34570.Eu0@amzURxni |
AVG | Win32:Malware-gen |
Avast | Win32:Malware-gen |
CrowdStrike | win/malicious_confidence_60% (W) |
Domains that associated with Masson:
0 | z.whorecord.xyz |
1 | a.tomx.xyz |
What are the symptoms of Masson trojan?
- Executable code extraction;
- Creates RWX memory;
- A process attempted to delay the analysis task.;
- Attempts to connect to a dead IP:Port (255 unique times);
- A process created a hidden window;
- The binary likely contains encrypted or compressed data.;
- Uses Windows utilities for basic functionality;
- Attempts to delete volume shadow copies;
- Attempts to repeatedly call a single API many times in order to delay analysis time;
- Writes a potential ransom message to disk;
The common signs and symptom of the Masson trojan virus is a steady entrance of various malware – adware, browser hijackers, et cetera. Because of the activity of these malicious programs, your system becomes very lagging: malware uses up large quantities of RAM and CPU capacities.
An additional noticeable impact of the Masson trojan virus visibility is unidentified programs showed in task manager. Sometimes, these processes may try to mimic system processes, however, you can recognize that they are not legit by taking a look at the origin of these processes. Pseudo system applications and Masson trojan’s processes are always listed as a user’s programs, not as a system’s.
How to remove Masson trojan virus?
- Download and install GridinSoft Anti-Malware.
- Open GridinSoft Anti-Malware and perform a “Standard scan“.
- “Move to quarantine” all items.
- Open “Tools” tab – Press “Reset Browser Settings“.
- Select proper browser and options – Click “Reset”.
- Restart your computer.
To erase Masson trojan and ensure that all extra malware, downloaded with the help of this trojan, will be removed, as well, I’d advise you to use GridinSoft Anti-Malware.
Masson removal guide
To detect and delete all malicious programs on your personal computer with GridinSoft Anti-Malware, it’s better to use Standard or Full scan. Quick Scan is not able to find all the malware, because it scans only the most popular registry entries and directories.
You can spectate the detected malicious programs sorted by their possible hazard till the scan process. But to choose any actions against malicious programs, you need to hold on until the scan is finished, or to stop the scan.
To choose the action for every spotted malicious or unwanted program, click the arrow in front of the name of the detected malicious program. By default, all the viruses will be removed to quarantine.
How to remove Masson Trojan?
Name: Masson
Description: Trojan Masson is a kind of virus that infiltrates into your computer, and after that performs different destructive functions. These features depend upon a type of Masson trojan: it can act as a downloader for many other malware or as a launcher for another destructive program which is downloaded in addition to the Masson trojan. During the last two years, trojans are also dispersed via e-mail attachments, and most of situations utilized for phishing or ransomware infiltration.
Operating System: Windows
Application Category: Trojan