In this article, I am going to detail the way the ProxyChanger trojan injected into your computer, and also how to eliminate ProxyChanger trojan virus.
What is ProxyChanger trojan?
| Name | ProxyChanger |
| Infection Type | Trojan |
| Symptoms |
|
| Similar behavior | Mendokus, MapsGory, Troxen, Harnig, BitMin, Medfos |
| Fix Tool |
See If Your System Has Been Affected by ProxyChanger trojan |
Trojan viruses are among the leading malware types by its injection frequency for quite a very long time. And currently, throughout the pandemic, when malware became tremendously active, trojan viruses enhanced their activity, too. You can see a number of messages on various resources, where people are whining concerning the ProxyChanger trojan virus in their computers, as well as asking for assisting with ProxyChanger trojan virus clearing.
Trojan ProxyChanger is a sort of virus that injects into your personal computer, and then executes a wide range of harmful functions. These functions rely on a type of ProxyChanger trojan: it may serve as a downloader for other malware or as a launcher for an additional harmful program which is downloaded together with the ProxyChanger trojan. Throughout the last two years, trojans are likewise delivered via e-mail add-ons, and most of situations utilized for phishing or ransomware infiltration.
ProxyChanger2 also known as
| Elastic | malicious (high confidence) |
| MicroWorld-eScan | Gen:Variant.Zusy.361847 |
| FireEye | Generic.mg.6fc80515c6161f10 |
| CAT-QuickHeal | Trojan.Wacatac |
| McAfee | GenericRXNI-CF!6FC80515C616 |
| Cylance | Unsafe |
| VIPRE | Trojan.Win32.Generic!BT |
| AegisLab | Trojan.Win32.Zusy.4!c |
| Sangfor | Trojan.Win32.Save.a |
| K7AntiVirus | Trojan-Downloader ( 00575c991 ) |
| BitDefender | Gen:Variant.Zusy.361847 |
| K7GW | Trojan-Downloader ( 00575c991 ) |
| CrowdStrike | win/malicious_confidence_60% (W) |
| Symantec | ML.Attribute.HighConfidence |
| APEX | Malicious |
| Avast | Win32:Malware-gen |
| Kaspersky | HEUR:Trojan.Win32.ProxyChanger.gen |
| Alibaba | TrojanDownloader:Win32/ProxyChanger.3ac9586f |
| NANO-Antivirus | Trojan.Win32.ProxyChanger.ihfvbc |
| Tencent | Malware.Win32.Gencirc.10ce30cd |
| Ad-Aware | Gen:Variant.Zusy.361847 |
| Emsisoft | Gen:Variant.Zusy.361847 (B) |
| Comodo | Malware@#638g045j9uqs |
| F-Secure | Trojan.TR/Redcap.apwhk |
| DrWeb | Trojan.DownLoader36.34481 |
| Zillya | Trojan.ProxyChanger.Win32.2182 |
| TrendMicro | TROJ_GEN.R002C0PB321 |
| McAfee-GW-Edition | GenericRXNI-CF!6FC80515C616 |
| Sophos | Mal/Generic-S |
| Ikarus | Trojan-Downloader.Win32.Agent |
| Jiangmin | Trojan.ProxyChanger.ak |
| MaxSecure | Trojan.Malware.74069992.susgen |
| Avira | TR/Redcap.apwhk |
| Antiy-AVL | Trojan[Downloader]/Win32.Agent |
| Kingsoft | Win32.Heur.KVMH017.a.(kcloud) |
| Microsoft | Trojan:Win32/Ymacco.AA85 |
| Gridinsoft | Trojan.Win32.Downloader.oa |
| Arcabit | Trojan.Zusy.D58577 |
| ZoneAlarm | HEUR:Trojan.Win32.ProxyChanger.gen |
| GData | Gen:Variant.Zusy.361847 |
| Cynet | Malicious (score: 100) |
| AhnLab-V3 | Malware/Win32.Generic.C4103087 |
| BitDefenderTheta | Gen:NN.ZexaF.34804.juW@aSg@p!ni |
| ALYac | Gen:Variant.Zusy.361847 |
| MAX | malware (ai score=85) |
| VBA32 | BScope.Adware.Presenoker |
| Malwarebytes | Malware.AI.4146137958 |
| Panda | Trj/GdSda.A |
| ESET-NOD32 | a variant of Win32/TrojanDownloader.Agent.FLZ |
| TrendMicro-HouseCall | TROJ_GEN.R002C0PB321 |
| Rising | Downloader.Agent!8.B23 (CLOUD) |
| Yandex | Trojan.ProxyChanger!TZ1NpKkA1Rs |
| SentinelOne | Static AI – Suspicious PE |
| eGambit | Unsafe.AI_Score_99% |
| Fortinet | W32/GenericRXNI.CF!tr |
| Webroot | W32.Trojan.Gen |
| AVG | Win32:Malware-gen |
| Cybereason | malicious.5c6161 |
| Paloalto | generic.ml |
| Qihoo-360 | Win32/Trojan.Proxy.9a1 |
Domains that associated with ProxyChanger:
| 0 | down.fei162.com |
| 1 | down.sf18.com |
| 2 | data.sf18.com |
What are the symptoms of ProxyChanger trojan?
- Executable code extraction;
- Attempts to connect to a dead IP:Port (252 unique times);
- Starts servers listening on 0.0.0.0:9527;
- HTTP traffic contains suspicious features which may be indicative of malware related traffic;
- Performs some HTTP requests;
The frequent sign of the ProxyChanger trojan virus is a gradual appearance of a wide range of malware – adware, browser hijackers, et cetera. Due to the activity of these malicious programs, your computer comes to be really sluggish: malware consumes large amounts of RAM and CPU capacities.
One more noticeable effect of the ProxyChanger trojan virus presence is unfamiliar operations showed off in task manager. Frequently, these processes might try to mimic system processes, however, you can understand that they are not legit by taking a look at the source of these processes. Quasi system applications and ProxyChanger trojan’s processes are always specified as a user’s programs, not as a system’s.
How to remove ProxyChanger trojan virus?
- Download and install Loaris Trojan Remover.
- Open Loaris and perform a “Standard scan“.
- “Move to quarantine” all items.
- Open “Tools” tab – Press “Reset Browser Settings“.
- Approve the reset pressing “Yes” button in the appeared window.
- Restart your computer.
To remove ProxyChanger trojan and ensure that all extra malware, downloaded with the help of this trojan, will be deleted, too, I’d advise you to use Loaris Trojan Remover.
ProxyChanger removal guide
To detect and eliminate all malware on your PC using Loaris Trojan Remover, it’s better to utilize Standard or Full scan. Removable scan, as well as Custom, will check only specified directories, so these checks are not able to provide the full information.
You can see the detects till the scan process goes. Nonetheless, to execute any actions against spotted malicious items, you need to wait until the process is finished, or to interrupt the scan.
To choose the specific action for each detected malicious items, choose the arrow in front of the detection name of detected malicious programs. By default, all malware will be sent to quarantine.
How to remove ProxyChanger Trojan?
Name: ProxyChanger
Description: Trojan ProxyChanger is a kind of virus that infiltrates into your computer, and after that performs different destructive functions. These features depend upon a type of ProxyChanger trojan: it can act as a downloader for many other malware or as a launcher for another destructive program which is downloaded in addition to the ProxyChanger trojan. During the last two years, trojans are also dispersed via e-mail attachments, and most of situations utilized for phishing or ransomware infiltration.
Operating System: Windows
Application Category: Trojan