Categories: Trojan

How to remove “Trojan.Downloader.Swizzor.DP”?

The Trojan.Downloader.Swizzor.DP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Downloader.Swizzor.DP virus can do?

Sample contains Overlay data
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Downloader.Swizzor.DP?


File Info:
name: 722F103C1B00780E70AA.mlwpath: /opt/CAPEv2/storage/binaries/4bdff559c1c8b58d09c2a9bdfc56871007cc7e1eaab920b4bb32acf3b87ae51bcrc32: 30467BAAmd5: 722f103c1b00780e70aa0496f26cdcc3sha1: cb0697ba715ad18811af4680b5b10c8dd662639bsha256: 4bdff559c1c8b58d09c2a9bdfc56871007cc7e1eaab920b4bb32acf3b87ae51bsha512: 126db110422def1dcb40721c0e890878d78c9946d00e908925815e98205abad86737cffed4fdf48cac731464963467fade06617ea3aad6e5fa972fe3525341bbssdeep: 3072:2Ibug+smk61d8H9TSkkwC7AGt95MMGEr+nX+33kd+F33nCV7FBZt16tb2nAyOQaS:j+NAT/c9frUune+N3C5F50gmMtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1882423E4B2C86585F7F8BAF507CEFB4512CF9A8768169D1F0BD43690824A5BBC847C02sha3_384: 5ad7986dfa9217d523408325569e7cc97cb4860427e1a7ecca2c42ae4826174bb1a9b18ac169fce25c804c8fd87be634ep_bytes: e800000000b87f0c08005b03c3ffe0f3timestamp: 2005-07-15 06:41:15
Version Info:
0: [No Data]

Trojan.Downloader.Swizzor.DP also known as:

Bkav	W32.AIDetectMalware
Lionic	Hacktool.Win32.PolyCrypt.lffm
ClamAV	Win.Trojan.Crypt-121
CAT-QuickHeal	Trojan.C2Lop.BB5
Skyhigh	BehavesLike.Win32.VirRansom.dc
ALYac	Trojan.Downloader.Swizzor.DP
Cylance	unsafe
VIPRE	Trojan.Downloader.Swizzor.DP
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan-Downloader ( 00529f801 )
BitDefender	Trojan.Downloader.Swizzor.DP
K7GW	Trojan-Downloader ( 00529f801 )
CrowdStrike	win/malicious_confidence_100% (D)
BitDefenderTheta	Gen:NN.ZexaF.36680.nuXmaCqH27ai
VirIT	Trojan.Win32.Swizzor.L
Symantec	Adware.Lop
ESET-NOD32	a variant of Win32/TrojanDownloader.Swizzor
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Packed.Win32.PolyCrypt.d
Alibaba	Packed:Win32/PolyCrypt.c31955d8
NANO-Antivirus	Trojan.Win32.Swizzor.evbgwc
ViRobot	Trojan.Win32.PolyCrypt.Gen.A
MicroWorld-eScan	Trojan.Downloader.Swizzor.DP
Avast	Win32:Swizzor-gen [Trj]
Rising	Trojan.DL.Swizzor.dvu (CLASSIC)
Sophos	Troj/Swizz-Fam
F-Secure	Trojan.TR/Dldr.Swizzor.EF
DrWeb	Trojan.Swizzor
Zillya	Downloader.Swizzor.Win32.29220
TrendMicro	TROJ_SWIZZOR.KQ
FireEye	Generic.mg.722f103c1b00780e
Emsisoft	Trojan.Downloader.Swizzor.DP (B)
SentinelOne	Static AI – Suspicious PE
GData	Trojan.Downloader.Swizzor.DP
Jiangmin	Packed.PolyCrypt.Gen
Webroot	W32.Downloader.Gen
Varist	W32/A-ecd4710d!Eldorado
Avira	TR/Dldr.Swizzor.EF
MAX	malware (ai score=100)
Antiy-AVL	Trojan[Packed]/Win32.PolyCrypt
Kingsoft	Win32.Troj.PolyCryptT.ea.62050
Xcitium	TrojWare.Win32.TrojanDownloader.Swizzor.Gen@13u32w
Arcabit	Trojan.Downloader.Swizzor.DP
ZoneAlarm	Packed.Win32.PolyCrypt.d
Microsoft	Trojan:Win32/C2Lop.B
Google	Detected
AhnLab-V3	Trojan/Win32.PolyCrypt.R10044
McAfee	Swizzor.gen
VBA32	Trojan.Win32.Drivecurb
Malwarebytes	MachineLearning/Anomalous.100%
Panda	Adware/Lop
TrendMicro-HouseCall	TROJ_SWIZZOR.KQ
Tencent	Packed.Win32.PolyCrypt.16000464
Yandex	Trojan.GenAsa!J9FdWIk/Abs
Ikarus	Trojan-Downloader.Win32.Swizzor
MaxSecure	Trojan.Packed.PolyCrypt.gen
Fortinet	W32/PolyCrypt.D!tr
AVG	Win32:Swizzor-gen [Trj]
Cybereason	malicious.a715ad
DeepInstinct	MALICIOUS