Trojan

Trojan.Win32.Wdfload.bza removal guide

Malware Removal

The Trojan.Win32.Wdfload.bza is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Wdfload.bza virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Win32.Wdfload.bza?


File Info:

crc32: A80E7C30
md5: b2a2ec71bd7c9d4be3c193b897c0c833
name: B2A2EC71BD7C9D4BE3C193B897C0C833.mlw
sha1: d81bff00bfbac029e20c3eec98501d34473d5d06
sha256: 5fc8fbc46b5396f8212678e4cc747badc1e5ea738b2c0892c937f028e05702a1
sha512: 4014b709cad2b39bbc98db25d51ed5f519eca31c3eb3ba2862a972389f99cd8b7ef5b39e0d6d603ac5ac262d5ba8ce46684c7b74d6081567b0a93f963504566a
ssdeep: 98304:ZoCjHm0QVBqDiKu8nmUc4xPuV5Mm+NEriZLRUvyjR1jNa8MfPuFPyfxwC2Q7gU:ZoCjHmPVBqDiKu8nmUc4xPuV5Mm+NEr
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

LegalCopyright: OnlyOne
InternalName: spicecfg
FileVersion: 1.0.0.0
CompanyName: OnlyOne
ProductName: SpiceTools
ProductVersion: 1.0.0.0
FileDescription: SpiceTools
OriginalFilename: spice.exe
Translation: 0x0809 0x04e4

Trojan.Win32.Wdfload.bza also known as:

LionicTrojan.Win32.Wdfload.4!c
CylanceUnsafe
ZillyaTrojan.Wdfload.Win32.3561
AlibabaTrojan:Win32/Wdfload.3160c0d5
Cybereasonmalicious.1bd7c9
SymantecML.Attribute.HighConfidence
AvastWin32:Malware-gen
KasperskyTrojan.Win32.Wdfload.bza
NANO-AntivirusTrojan.Win32.Wdfload.htdkiz
TencentWin32.Trojan.Wdfload.Peza
JiangminTrojan.Wdfload.cte
AviraTR/Wdfload.khokw
MicrosoftTrojan:Win32/Occamy.C5F
TACHYONTrojan/W32.Wdfload.3425792
McAfeeArtemis!B2A2EC71BD7C
PandaTrj/GdSda.A
YandexTrojan.Wdfload!XwRInuoWLEQ
IkarusTrojan.Wdfload
FortinetW32/PossibleThreat
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan.Win32.Wdfload.bza?

Trojan.Win32.Wdfload.bza removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment