Trojan

Trojan:Win32/Goriadu!pz removal instruction

Malware Removal

The Trojan:Win32/Goriadu!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Goriadu!pz virus can do?

  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Trojan:Win32/Goriadu!pz?


File Info:

name: D838B8004B3E08C10D97.mlw
path: /opt/CAPEv2/storage/binaries/9f363b7d6d0e002edc71b621a2f0087d115ec17925c7c5b674fee1f6a3498369
crc32: A5E26358
md5: d838b8004b3e08c10d97e4d76b197bad
sha1: 033d233131c50924a4fbe16e34e67d9c32592fac
sha256: 9f363b7d6d0e002edc71b621a2f0087d115ec17925c7c5b674fee1f6a3498369
sha512: 95b0115c011e34b9e527a145bfb6bc477fde3278f5033b4fda4533a5e39b02c44b77343608d0c4a871515d3ab15d47cf975310765afe303fd4d87a4cf9d0e1c2
ssdeep: 6144:JrwtcXdrcR/7GHck3GIRXIbDccdjNSYsmIw5LhfhYLLjn+TBpAFvrXP:t9XdrcR/6jrMcCRfhYHjn+TYJ7P
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1F7649D0176C3C0B2C8AE09354985D7A957FDB962ABF9D2C7FFC41A8D5E321C25A34386
sha3_384: dbe2d81b2e18dba8924bd88142052db51cbf115a3055e7cf648b00996c969537e5513a55a038fd6df81e5f27e9e5ed3a
ep_bytes: 837c2408017505e834b20000ff742404
timestamp: 2010-11-05 09:33:03

Version Info:

0: [No Data]

Trojan:Win32/Goriadu!pz also known as:

LionicTrojan.Win32.Agent.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Heur.Naffy.1
ClamAVWin.Trojan.Agent-708958
FireEyeGeneric.mg.d838b8004b3e08c1
SkyhighBehavesLike.Win32.Infected.fh
Cylanceunsafe
ZillyaTrojan.Agent.Win32.230089
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:Win32/Goriadu.047e3b51
K7GWTrojan ( 004d06961 )
K7AntiVirusTrojan ( 004d06961 )
BitDefenderThetaGen:NN.ZedlaF.36744.tu4@aS5A6ab
VirITTrojan.Win32.Agent3.QAD
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Agent.RYQ
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Agent.nevvpd
BitDefenderGen:Heur.Naffy.1
NANO-AntivirusTrojan.Win32.MLW.cotvv
AvastWin32:Malware-gen
TencentTrojan.Win32.Goriadu.rth
EmsisoftGen:Heur.Naffy.1 (B)
BaiduWin32.Trojan.Agent.cy
F-SecureTrojan.TR/Goriadu.cna
DrWebTrojan.Siggen5.41986
VIPREGen:Heur.Naffy.1
TrendMicroTROJ_AGENT_024569.TOMB
SophosMal/Emogen-Y
IkarusTrojan.Win32.Agent
JiangminTrojan/Agent.frwd
WebrootW32.Trojan.Gen
GoogleDetected
AviraTR/Goriadu.cna
Antiy-AVLTrojan/Win32.Agent
KingsoftWin32.Troj.NetHijack.c.323584
MicrosoftTrojan:Win32/Goriadu!pz
XcitiumTrojWare.Win32.Goriadu.C@4ax3xb
ArcabitTrojan.Naffy.1
ViRobotTrojan.Win32.A.Agent.315392.L
ZoneAlarmTrojan.Win32.Agent.nevvpd
GDataGen:Heur.Naffy.1
VaristW32/Goriadu.B.gen!Eldorado
McAfeePWS-DOD.f
MAXmalware (ai score=100)
VBA32Trojan.Agent
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_AGENT_024569.TOMB
RisingTrojan.Win32.NetFilter.b (CLASSIC)
YandexTrojan.Agent!BUmLv7aXt4U
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.3864986.susgen
FortinetW32/Agent.RY!tr
AVGWin32:Malware-gen
DeepInstinctMALICIOUS

How to remove Trojan:Win32/Goriadu!pz?

Trojan:Win32/Goriadu!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment