Trojan-Banker.Win32.IcedID.tvzk (file analysis)

The Trojan-Banker.Win32.IcedID.tvzk is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Banker.Win32.IcedID.tvzk virus can do?

Executable code extraction
Creates RWX memory

Related domains:

rostovpapap.best

blockiuditi.best

cubabucas.xyz

cubefresno.best

How to determine Trojan-Banker.Win32.IcedID.tvzk?


File Info:
crc32: 3374A26E
md5: a254886a03b1b748d88419371f377132
name: vvvv.exe
sha1: e557ab8353748277637c525a2dbabb92068062e8
sha256: f3daeeabd3ea35affa7b9f3f0b04e18d66358dd86b694f6be67fe9b6b0c8e56e
sha512: 17c3d775272902ac8b38fa2520986ffdb9c84583a650fc30978c0391992e3bda8d082e1c6fe68bf6bbc2a837af220f91aaa42b71db3454801d26a5394265b00c
ssdeep: 24576:AUL3IV1L7dNy7KCDXgQH8mk1bxZOccnxv3:9IVF/UjgQH811NZOxnx
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: (C) 2007-2015 
InternalName: Findclsestmatchingmde1
FileVersion: 9.2.5.4
CompanyName: ProXoft L.L.C.
FileDescription: Priorities Gotdotnet Enforcing Primitives
LegalTrademarks: (C) 2007-2015 
Comments: Priorities Gotdotnet Enforcing Primitives
ProductName: Findclsestmatchingmde1
ProductVersion: 9.2.5.4
PrivateBuild: 9.2.5.4
OriginalFilename: Findclsestmatchingmde1
Translation: 0x0409 0x04b0

Trojan-Banker.Win32.IcedID.tvzk also known as:

MicroWorld-eScan	Trojan.Agent.ELJQ
FireEye	Trojan.Agent.ELJQ
ALYac	Trojan.Agent.Wacatac
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Multi.Generic.4!c
K7AntiVirus	Trojan ( 005603a51 )
BitDefender	Trojan.Agent.ELJQ
K7GW	Trojan ( 005603a51 )
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
GData	Trojan.Agent.ELJQ
Kaspersky	Trojan-Banker.Win32.IcedID.tvzk
Alibaba	Trojan:Win32/GenKryptik.4a586e1a
ViRobot	Trojan.Win32.Agent.813568.E
Ad-Aware	Trojan.Agent.ELJQ
Emsisoft	Trojan.Agent (A)
Comodo	Malware@#2ezrkk1n699iu
F-Secure	Trojan.TR/AD.PhotoDlder.tztrl
DrWeb	Trojan.DownLoader30.39601
McAfee-GW-Edition	RDN/PWS-Banker
Sophos	Mal/Generic-S
Ikarus	Trojan-Ransom.Crysis
Cyren	W32/Trojan.LKVR-8709
Webroot	W32.Trojan.Gen
Avira	TR/AD.PhotoDlder.tztrl
MAX	malware (ai score=83)
Endgame	malicious (high confidence)
Arcabit	Trojan.Agent.ELJQ
ZoneAlarm	Trojan-Banker.Win32.IcedID.tvzk
Microsoft	Trojan:Win32/Skeeyah.A!MTB
McAfee	RDN/PWS-Banker
TACHYON	Banker/W32.IcedID.813568
VBA32	BScope.Backdoor.Androm
Malwarebytes	Trojan.IcedID
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/GenKryptik.EDWM
TrendMicro-HouseCall	TROJ_GEN.R057H0CBB20
Tencent	Win32.Trojan-banker.Icedid.Lkdg
MaxSecure	Trojan.Malware.74824965.susgen
Fortinet	W32/IcedID.EDWM!tr
BitDefenderTheta	Gen:NN.ZexaF.34090.Xu0@aOL9s4ei
AVG	Win32:TrojanX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_60% (W)
Qihoo-360	Generic/Trojan.1ee

How to remove Trojan-Banker.Win32.IcedID.tvzk?

Trojan-Banker.Win32.IcedID.tvzk removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan-Banker.Win32.IcedID.tvzk (file analysis)