How to remove “Trojan:Win32/Dridex!pz”?

The Trojan:Win32/Dridex!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Dridex!pz virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan:Win32/Dridex!pz?


File Info:
name: B2BDA6AB2153ECD2BED5.mlw
path: /opt/CAPEv2/storage/binaries/193638c63f506b570bdcff369520f31c95997474b397b4f1d447ff576a0ba89b
crc32: B6045246
md5: b2bda6ab2153ecd2bed5ba99833fdd2f
sha1: 6b9544d9d6f4dd32cc7489d7b2a25295e6b26fcf
sha256: 193638c63f506b570bdcff369520f31c95997474b397b4f1d447ff576a0ba89b
sha512: 3ab7fad448dc55524a33f5254a0857a2995b6fa2ab918d27f29bacdb7947741ebea6fb4b8ea71689c1c785dc79202f1b9c73a35b1821d1ae04f55a3e2e068d50
ssdeep: 768:MEggqVCt75b+e3KEqcu+ixmlPwDgg0dlgLFnKQB2ah:1CL1n5LFKQBB
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T180F219253BE2F473D1A040B0325BC7E25E66B9B3D70922677BE92B5B3C34534A94E2C5
sha3_384: cdc55cb59fcf2e35108edd27ce0442dff776baf9776a9f2a8935cd404d1d89d64032f8a27e2bd2cf5ce2b8ce00858201
ep_bytes: 5589e581ec3c01000060837d0c010f85
timestamp: 2023-01-30 02:07:29

Version Info:
FileDescription: MODULE 76(001) Honda bike kline
CompanyName: MMC flasher
LegalCopyright: All rights reserved
ProductVersion: 10.001
Translation: 0x0409 0x0000

Trojan:Win32/Dridex!pz also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Dridex.4!c
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Midie.141640
Skyhigh	BehavesLike.Win32.Infected.nh
McAfee	GenericRXKP-PN!B2BDA6AB2153
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 00584baa1 )
Alibaba	Trojan:Win32/Dridex.202d7315
K7GW	Riskware ( 00584baa1 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Midie.D22948
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Malware.Belylx-9821960-0
BitDefender	Gen:Variant.Midie.141640
Avast	Win32:TrojanX-gen [Trj]
Sophos	Mal/Generic-S
F-Secure	Heuristic.HEUR/AGEN.1354530
VIPRE	Gen:Variant.Midie.141640
TrendMicro	TROJ_GEN.R002C0DLR23
Emsisoft	Gen:Variant.Midie.141640 (B)
Ikarus	Trojan.Win32.Agent
Varist	W32/Fuerboos.AH.gen!Eldorado
Avira	HEUR/AGEN.1354530
Antiy-AVL	Trojan/Win32.Dridex
Kingsoft	malware.kb.a.997
Microsoft	Trojan:Win32/Dridex!pz
GData	Win32.Trojan.PSE.10UVI4S
Google	Detected
AhnLab-V3	Malware/Win32.RL_Generic.R270117
MAX	malware (ai score=86)
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002C0DLR23
Rising	Trojan.Dridex!8.33B (TFE:5:SY7nRCeB3QN)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.B7DE!tr
BitDefenderTheta	AI:Packer.95C26BF21E
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Trojan:Win32/Dridex!pz?

Trojan:Win32/Dridex!pz removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X