Categories: Malware

About “PWS:Win32/Dozmot!pz” infection

The PWS:Win32/Dozmot!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PWS:Win32/Dozmot!pz virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Yara detections observed in process dumps, payloads or dropped files

How to determine PWS:Win32/Dozmot!pz?


File Info:
name: 1A5DE44E416AA6A11562.mlwpath: /opt/CAPEv2/storage/binaries/26d4ff9bada3aace5cd67d5cde1af45754f1a7b68c68f90826eb7b8c5fd82ecacrc32: E6C0071Bmd5: 1a5de44e416aa6a1156271d1d7e7b1ddsha1: 46bbae7dc00a0245a42802042be1e12df732da71sha256: 26d4ff9bada3aace5cd67d5cde1af45754f1a7b68c68f90826eb7b8c5fd82ecasha512: 96c2888334698e924305013a6f4be637c062696c94220ee19b7924caf88654fde99bb87ba2dd2566fceaa4cd7d8a441ee4b67ef895641d1e0387abebce6cae2essdeep: 192:0T87CfMixNyK35giWuwEd2SLWVSHKzbgeN3BS3OWoa4v0E3Ftm/bXvn06QfKDRgQ:0rf9xNYPw76DHdU+Wo53F0/bXv0gNHnXtype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windowstlsh: T1BF729EF7F7ECB014CE445E3E05809BEA876370A097985AC807B2142669FF7181DAEA1Csha3_384: 7e91e6d2b4ae1b325a58989d8bcd807b2b4fcd57fce060566ea3a615a9b66555db91e86876b90d987d59de75492d2b06ep_bytes: 668bc053609ceb01ff8bc0b902002300timestamp: 2010-09-16 15:16:18
Version Info:
0: [No Data]

PWS:Win32/Dozmot!pz also known as:

Lionic	Trojan.Win32.Magania.lt2u
MicroWorld-eScan	Gen:Variant.Magania.4
CAT-QuickHeal	TrojanPWS.Lolyda.AM6
Skyhigh	BehavesLike.Win32.PWSOnlineGames.lh
McAfee	BackDoor-EDJ
Cylance	unsafe
VIPRE	Gen:Variant.Magania.4
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	TrojanPSW:Win32/Dozmot.df608591
K7GW	Trojan ( 004bcce41 )
K7AntiVirus	Trojan ( 004bcce41 )
VirIT	Backdoor.Win32.Generic.EEQ
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/Kryptik.DLU
APEX	Malicious
TrendMicro-HouseCall	Mal_OLGM-39
ClamAV	Win.Trojan.Agent-632421
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Magania.4
NANO-Antivirus	Trojan.Win32.WOW.bginm
Avast	Win32:Malware-gen
Tencent	Trojan.Win32.OnlineGames.pv
Emsisoft	Gen:Variant.Magania.4 (B)
Google	Detected
F-Secure	Trojan.TR/Crypt.ULPM.Gen
DrWeb	Trojan.PWS.Gamania.28457
Zillya	Trojan.WOW.Win32.8386
TrendMicro	Mal_OLGM-39
FireEye	Generic.mg.1a5de44e416aa6a1
Sophos	Mal/Medfos-K
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Generic.awas
Varist	W32/Agent.GV.gen!Eldorado
Avira	TR/Crypt.ULPM.Gen
MAX	malware (ai score=100)
Antiy-AVL	Trojan[GameThief]/Win32.WOW
Kingsoft	malware.kb.b.995
Microsoft	PWS:Win32/Dozmot!pz
Xcitium	Packed.Win32.MUPX.Gen@24tbus
Arcabit	Trojan.Magania.4
ViRobot	Trojan.Win32.A.PSW-Wow.14848
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Magania.4
Cynet	Malicious (score: 100)
AhnLab-V3	Win-Trojan/Onlinegamehack23.Gen
Acronis	suspicious
VBA32	TScope.Malware-Cryptor.SB
ALYac	Gen:Variant.Magania.4
TACHYON	Trojan/W32.Small.17304.B
Malwarebytes	Malware.AI.3900344816
Panda	Trj/Genetic.gen
Rising	Trojan.PSW.Win32.Sousuke.a (CLASSIC)
Yandex	Trojan.GenAsa!kpptaeWt8nQ
Ikarus	Trojan-GameThief.Win32.Magania
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Kryptik.AWW!tr
BitDefenderTheta	Gen:NN.ZedlaF.36802.bm5@amB8wr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS
alibabacloud	Trojan:Win/Magania