Categories: Trojan

TrojanDownloader:Win32/Banload.ZEA removal

The TrojanDownloader:Win32/Banload.ZEA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Banload.ZEA virus can do?

Executable code extraction
Possible date expiration check, exits too soon after checking local time
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
Uses Windows utilities for basic functionality
Attempts to create or modify a Browser Helper Object
Anomalous binary characteristics
Uses suspicious command line tools or Windows utilities

Related domains:

nacional-bike-com.web19.redehost.com.br

fazendae02.web101.f1.k8.com.br

How to determine TrojanDownloader:Win32/Banload.ZEA?


File Info:
crc32: 103EE9E8md5: 8c1d04f84b836fde871d4125515f5331name: 8C1D04F84B836FDE871D4125515F5331.mlwsha1: 57316baa58989e228ef8c8fe9616d10b8b73cfb1sha256: 8d9613a8747b625cc9c4b852f721a3d4fd50ac0edfa2b2a8f156e426098cfee3sha512: d69159acb880996ddebb7d253de2248e00a96f23656c1be648477096f191095731cee84f676dfd0bf8fd1aecf232c02f37866d78815ce132e8773a9af283635cssdeep: 6144:dKcxM2msySPRIX8lSr8dahmYqKPNYYrADbfETqUSJp:HxM4RIslSQdBKNJrA3flTtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0409 0x04b0ProductVersion: 1.00InternalName: Puxador_Cliente2FileVersion: 1.00OriginalFilename: Puxador_Cliente2.exeProductName: halltray

TrojanDownloader:Win32/Banload.ZEA also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Trojan.Heur.ZGY.7
FireEye	Generic.mg.8c1d04f84b836fde
ALYac	Gen:Trojan.Heur.ZGY.7
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Spyware ( 0055e3db1 )
BitDefender	Gen:Trojan.Heur.ZGY.7
K7GW	Spyware ( 0055e3db1 )
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Dropper.Remcos-9800818-0
Kaspersky	Trojan-Downloader.Win32.Banload.bwuw
Alibaba	TrojanDownloader:Win32/Banload.dd523081
NANO-Antivirus	Trojan.Win32.Banload.undwg
ViRobot	Trojan.Win32.A.Downloader.229376.GE
AegisLab	Trojan.Win32.Banload.a!c
Ad-Aware	Gen:Trojan.Heur.ZGY.7
Emsisoft	Gen:Trojan.Heur.ZGY.7 (B)
Comodo	Malware@#1zk4q9g54s47s
F-Secure	Trojan.TR/VB.Downloader.Gen
DrWeb	Trojan.DownLoader6.29130
Zillya	Downloader.Banload.Win32.41732
TrendMicro	TROJ_GEN.R002C0DLL20
McAfee-GW-Edition	Generic.dx!8C1D04F84B83
Sophos	Mal/Generic-R + Mal/VBInjec-B
Webroot	W32.Downloader.Gen
Avira	TR/VB.Downloader.Gen
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.AGeneric
Kingsoft	Win32.TrojDownloader.Banload.(kcloud)
Microsoft	TrojanDownloader:Win32/Banload.ZEA
Arcabit	Trojan.Heur.ZGY.7
ZoneAlarm	Trojan-Downloader.Win32.Banload.bwuw
GData	Gen:Trojan.Heur.ZGY.7
Cynet	Malicious (score: 85)
AhnLab-V3	Downloader/Win32.Banload.R26348
McAfee	Generic.dx!8C1D04F84B83
VBA32	TScope.Trojan.VB
Malwarebytes	Trojan.Banker.Gen
Panda	Generic Malware
ESET-NOD32	a variant of Win32/Spy.Bancos.NVV
TrendMicro-HouseCall	TROJ_GEN.R002C0DLL20
Rising	Downloader.Banload!8.15B (TFE:5:oNHCHinOFlI)
Yandex	Trojan.GenAsa!AbP89Eu+kGk
Ikarus	Trojan-Downloader.Win32.Bancos
Fortinet	W32/Bancos.NVV!tr
BitDefenderTheta	AI:Packer.CB444DC315
AVG	Win32:Malware-gen
Cybereason	malicious.84b836
Paloalto	generic.ml
Qihoo-360	HEUR/Malware.QVM03.Gen