Trojan-Dropper.Win32.Daws.dzvs removal

The Trojan-Dropper.Win32.Daws.dzvs is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-Dropper.Win32.Daws.dzvs virus can do?

Behavioural detection: Executable code extraction – unpacking
Dynamic (imported) function loading detected
Unconventionial language used in binary resources: Korean
Authenticode signature is invalid

How to determine Trojan-Dropper.Win32.Daws.dzvs?


File Info:
name: 38AD12C0D37FE12B5EB0.mlw
path: /opt/CAPEv2/storage/binaries/e63ac18e59e4ac75100c5631bad911fecaaaac7ee91eed46efe2c41679001027
crc32: BA483B5C
md5: 38ad12c0d37fe12b5eb049f19ecf1297
sha1: 03f3a17d91d43b78ddfadd579bac136d413da0e8
sha256: e63ac18e59e4ac75100c5631bad911fecaaaac7ee91eed46efe2c41679001027
sha512: 8b8a31a34c5c25ee9077e8306f04a6c60746dfc396a7b10129a98bd7761437c238c1de80803273801d67a65f14c52f812fa795410f1763bcaf594f1402a6042a
ssdeep: 192:5TATzutTUuYvVyJlGtahOwWOS2MVD30s5rN6W6ZeW8QrvgP:MKBUuYvVYorwWT2MVD30sv6W6ZeW8QjY
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A8B28203E65DD422F2A88AB2096382D8493A7C336D524E1F7E8D7F1D2F3454269E076B
sha3_384: 522f853981b43efc00ad887f20e55fbe548b9c51f86ae3ddf23658499d1a721eafcaf6187ab155b25e16500409c4b831
ep_bytes: 681c154000e8f0ffffff000000000000
timestamp: 2012-05-25 10:46:36

Version Info:
Translation: 0x0412 0x04b0
Comments: igfxsrvc Module
CompanyName: Microsoft Corporation
FileDescription: Microsoft(R) Office IME 2007
LegalCopyright: Microsoft Corporation
LegalTrademarks: Microsoft(R) Office IME 2007
ProductName: Microsoft(R) Office IME 2007
FileVersion: 1.00
ProductVersion: 1.00
InternalName: igfztray
OriginalFilename: igfztray.exe

Trojan-Dropper.Win32.Daws.dzvs also known as:

Lionic	Trojan.Win32.Generic.4!c
Cynet	Malicious (score: 99)
McAfee	Artemis!38AD12C0D37F
Cylance	Unsafe
Sangfor	Trojan.Win32.Agent.buxin
CrowdStrike	win/malicious_confidence_90% (W)
BitDefenderTheta	Gen:NN.ZevbaF.34606.bm0@amjsbOpG
Symantec	Trojan.Gen
Elastic	malicious (high confidence)
TrendMicro-HouseCall	TROJ_GEN.R067C0ODL22
Paloalto	generic.ml
Kaspersky	Trojan-Dropper.Win32.Daws.dzvs
NANO-Antivirus	Trojan.Win32.TrjGen.scrgy
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Agent.Llrp
Comodo	Malware@#3jppkwe390nvl
F-Secure	Trojan.TR/Agent.24576.645
DrWeb	Trojan.Siggen4.1066
Zillya	Trojan.Agent.Win32.426155
TrendMicro	TROJ_GEN.R067C0ODL22
McAfee-GW-Edition	BehavesLike.Win32.Virus.mz
Sophos	Mal/Emogen-H
APEX	Malicious
Webroot	W32.AGent.zets
Avira	TR/Agent.24576.645
Antiy-AVL	Trojan/Generic.ASMalwS.309647
Microsoft	Trojan:Win32/Wacatac.B!ml
VBA32	Trojan.Agent
Ikarus	Trojan.Win32.Pasta
Fortinet	W32/Emogen.H
AVG	Win32:Malware-gen

How to remove Trojan-Dropper.Win32.Daws.dzvs?

Trojan-Dropper.Win32.Daws.dzvs removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X