Trojan:Win32/Meterpreter!pz removal guide

The Trojan:Win32/Meterpreter!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Meterpreter!pz virus can do?

• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan:Win32/Meterpreter!pz?

File Info:
name: 13188B121A135578D7A5.mlw
path: /opt/CAPEv2/storage/binaries/c6a68544d8b470d4c46b1aee4282210bc9b0e1a94cde47ec87930615b7a8d816
crc32: D929A765
md5: 13188b121a135578d7a5dcd6a74a4611
sha1: ccd955330de0d2456a091258dfbf2acbd5aaa911
sha256: c6a68544d8b470d4c46b1aee4282210bc9b0e1a94cde47ec87930615b7a8d816
sha512: 210549b9d590f1d34a291115a5c5f1d11aaa343bfa300a8dc13af5a86e65ce639349c805c41de138c157587308b6c52d541eefc8b85f3bc5f8e0703d2367eb6c
ssdeep: 768:IAgZHnXFU1xYYBviqXZRkOQlah317OI9zYBD9O6gR80Q/I2rWVCtJ4gAV/q3:IFlVKx/NiqXZRAah31CIZYBZCQxKVCt1
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13723F1783AFF4164C6F6767952F72F038C6F7978CAB5130E2218A4ECA969044DE98335
sha3_384: 513cacfd105d1289a1958f621c53736a12edaed51f2c4e161b9d567a8f0931d381bb4c348b8a9bc49c0b086aac45e50b
ep_bytes: 60be00d040008dbe0040ffff5783cdff
timestamp: 2009-08-22 08:22:46

Version Info:
Comments: Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
CompanyName: Apache Software Foundation
FileDescription: ApacheBench command line utility
FileVersion: 2.2.14
InternalName: ab.exe
LegalCopyright: Copyright 2009 The Apache Software Foundation.
OriginalFilename: ab.exe
ProductName: Apache HTTP Server
ProductVersion: 2.2.14
Translation: 0x0409 0x04b0

Trojan:Win32/Meterpreter!pz also known as:

How to remove Trojan:Win32/Meterpreter!pz?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.