(wikiHow) [SOLVED] How to Remove AZORult malware RigEK from Windows PC or Apple MacOS / OS X

AZORult is really the weakest of this pack, it’s a sorry family. It’s a Trojan stallion that takes data from a bargained framework.

This problem can be easily solved. Download CyberByte antivirus from the Apple AppStore.

Mac / MacOS / OS X users can download antivirus for Mac solution CyberByte by clicking the banner below. The free antivirus will help you to know if your Mac is infected. Antivirus for Mac is an awarded software for malware detection. The free antivirus for Mac is available for new MacOS and older OS X versions.

Features of CyberByte™ antivirus:

  • Protects you from all kind of threats
  • CyberByte™ custom detection engine includes Mac and Windows malware protection and detection
  • Fastest scanning times in the market
  • Crypto Mining rogue extensions/malware detection
  • Ransomware detection - don’t negotiate with ransomware cyber terrorists – keep your Mac and Windows safe
  • Active live protection from background
  • Certified Threat Detector by OPSWAT
  • Easy to Install
  • Easy to Manage
  • Incredible value for money

Invisible, protecting you from behind the scenes - You will not feel it is installed on your computer, easy on the resources, like a protection software should be.

Original technology that combines behavioral heuristic analysis with powerful signatures database – the CyberByte™ Protection Engine  delivers top of the line protection in an instant.

Fastest scanning times in the market – your time is precious, but also so is your digital life – CyberByte™ delivers fast scanning saving both time and your valuable data.

Don’t negotiate with ransomware cyber terrorists – keep your Mac safe and don’t ever end up paying for what is already yours.

Protect others as well – the CyberByte™ Protection Engine  not only detects the threat but stops it from spreading to other Macs or Windows machines.

Don’t let strangers use your resources – more than 80% of the attacks are crypto mining driven. Are you sure your computer is not mining for crypto while you read this text?

Our malware protection will continuously look after your device providing the best security against viruses. Give us the chance to prove it by downloading the antivirus for your device.

The free download antivirus is available for both Mac and Windows users.

The antivirus for Mac is a certified product by OPSWAT (OPSWAT is a San Francisco-based software company that provides solutions to secure and manage IT infrastructure. Founded in 2002, OPSWAT delivers solutions that provide manageability of endpoints and networks, and that help organizations protect against
zero-day attacks by using multiple antivirus engine scanning and document sanitization.
To learn more about OPSWAT’s innovative and unique solutions, please visit http://www.opswat.com).


After establishment and running by another bit of malware (most generally Seamless), AZORult starts searching for delicate information. Specifically, it searches for and presents the accompanying to its C2C, as gave by malwarebreakdown.com:

Spared passwords from a few program writes (Browsers, Email, FTP, IM)
Treats from programs and structures (shape history, autofill):
Gathers wallet.dat records from famous bitcoin customers (Bitcoin, Litecoin, and so forth.)
Skype message history
Snatches documents from visit history at that point peruses the records with unique utilities
Work area records grabber
Gathers records with determined expansions from Desktop. Sifted by record measure. Recursively looks records in organizers.
Rundown of introduced programs
Rundown of running procedures
Username, PC name, OS, RAM


• port 80 – pumpme.ga – GET / (gate used by this campaign)
• port 443 – pumpme.ga – HTTPS traffic
• port 80 – – Rig EK
• port 443 – jr753gey6528iyehd.com – attempted TCP connections caused by Ramnit, but no response from the server
• port 443 – mdgoixkousej.com – encrypted traffic caused by Ramnit
• port 443 – jinrdvvggkqsbafam.com – encrypted traffic caused by Ramnit
• port 80 – – GET /prink.exe (AZORult follow-up malware)
• port 80 – doueven.click – POST /gate.php (AZORult callback)
•DNS query for gtlijnbttxtstnisew.com – response: No such name (SOA a.gtld-servers.net)
•DNS query for hndhysdogmddmlbms.com – response: No such name (SOA a.gtld-servers.net)
•DNS query for jblciykrcfxyymxwgdd.com – response: No such name (SOA a.gtld-servers.net)
•DNS query for okqigyiadj.com – response: No such name (SOA a.gtld-servers.net)
•DNS query for rgaonnkejei.com – response: No such name (SOA a.gtld-servers.net)
•DNS query for scihytydbukstbtwok.com – response: No such name (SOA a.gtld-servers.net)
•DNS query for xegrplmhtvfevx.com – response: No such name (SOA a.gtld-servers.net)
•DNS query for xvlaykoevuesourj.com – response: No such name (SOA a.gtld-servers.net)
•DNS query for yxvcjnrx.com – response: No such name (SOA a.gtld-servers.net)

Our CyberByte Antivirus and Internet Security solution can help you to protect your Mac or PC


The procedure is simple:

  • Just free download antivirus from CyberByte website either for Mac or Windows.
  • Install it using the antivirus installer package.
  • Windows and Mac users will free malware scan their devices. The scan duration depends on how many files the end user has.
  • CyberByte antivirus will show if any files are infected after the scan is finished.

Mac users can free download mac antivirus CyberByte.
Windows users can free download windows antivirus CyberByte.
The free antivirus version is available with limited features.


Companies can protect them from hacking by using the best hosting and web hosting service available with the best cybersecurity.