Categories: Trojan

Trojan.Win32.Povertel.bbz information

The Trojan.Win32.Povertel.bbz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Povertel.bbz virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • A scripting utility was executed
  • Creates a hidden or system file
  • Attempts to modify proxy settings

Related domains:

z.whorecord.xyz
a.tomx.xyz
paste.ee
ocsp.digicert.com
crl4.digicert.com
crl3.digicert.com

How to determine Trojan.Win32.Povertel.bbz?


File Info:

crc32: 6ED98D0Cmd5: 6f09c7f423232ef509f90e66b1146a50name: upload_filesha1: bea14870eb44669c73ba5fe75c6ec2657654daebsha256: fbad6defdda31579e98bbb4f27193891ad8b5d13e32a75dcc4d2666f2c3a5843sha512: f16479c779a659f2f3729ec6e37058843cc50629b2fe8696d86141dc48d3d035b8d1fc6dcda330cc6bd7d1daeeca9ecb6854459402227484e361b8b0cf31b159ssdeep: 6144:Lof7DeNUSfGgHCU/2McdfoI/ZX0rYfCzuCCMQZN/OdnFQ8+uXNvxsCtrEKRKY:GYV6MorX7qzuC3QHO9FQgd5sCtpHtype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

Translation: 0x0809 0x04b0

Trojan.Win32.Povertel.bbz also known as:

Bkav W32.AIDetectVM.malware1
MicroWorld-eScan Trojan.GenericKD.44052620
FireEye Generic.mg.6f09c7f423232ef5
ALYac Trojan.Agent.Povertel
K7AntiVirus Riskware ( 0040eff71 )
BitDefender Trojan.GenericKD.44052620
K7GW Riskware ( 0040eff71 )
Cybereason malicious.0eb446
APEX Malicious
Avast Script:SNH-gen [Trj]
ClamAV Win.Malware.SmokeLoader-9774773-1
Kaspersky Trojan.Win32.Povertel.bbz
Alibaba Trojan:Win32/Povertel.56cdc17b
ViRobot Trojan.Win32.Z.Povertel.386560
AegisLab Trojan.Win32.Generic.4!c
Ad-Aware Trojan.GenericKD.44052620
Sophos Mal/Generic-S
Comodo Malware@#36h7nq5wm33g7
F-Secure Heuristic.HEUR/AGEN.1138090
Invincea Mal/Generic-S
McAfee-GW-Edition BehavesLike.Win32.TrojanAitInject.fc
Emsisoft Trojan.GenericKD.44052620 (B)
Webroot W32.Malware.Gen
Avira HEUR/AGEN.1138090
MAX malware (ai score=84)
Antiy-AVL Trojan[Dropper]/Win32.Sysn
Microsoft Trojan:Win32/Ymacco.AAFB
Arcabit Trojan.Generic.D2A0308C
ZoneAlarm Trojan.Win32.Povertel.bbz
GData Trojan.GenericKD.44052620
Cynet Malicious (score: 85)
AhnLab-V3 Malware/Win32.Generic.C2832953
McAfee RDN/Generic.grp
VBA32 Trojan.Fuerboos
Malwarebytes Trojan.MalPack.AutoIt
Ikarus Trojan.Worm
Fortinet W32/Povertel.BBZ!tr
AVG Script:SNH-gen [Trj]
Paloalto generic.ml
CrowdStrike win/malicious_confidence_70% (W)
Qihoo-360 Generic/HEUR/QVM11.1.88B7.Malware.Gen

How to remove Trojan.Win32.Povertel.bbz?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

How to remove “Troj/VB-IGX”?

The Troj/VB-IGX is considered dangerous by lots of security experts. When this infection is active,…

23 mins ago

UDS:Trojan.Win32.DBadur removal tips

The UDS:Trojan.Win32.DBadur is considered dangerous by lots of security experts. When this infection is active,…

28 mins ago

What is “Jalapeno.348”?

The Jalapeno.348 is considered dangerous by lots of security experts. When this infection is active,…

43 mins ago

Razy.665944 removal

The Razy.665944 is considered dangerous by lots of security experts. When this infection is active,…

53 mins ago

Symmi.3599 removal instruction

The Symmi.3599 is considered dangerous by lots of security experts. When this infection is active,…

53 mins ago

Malware.AI.73035705 information

The Malware.AI.73035705 is considered dangerous by lots of security experts. When this infection is active,…

54 mins ago