Trojan:Win32/SmokeLoader!pz information

The Trojan:Win32/SmokeLoader!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/SmokeLoader!pz virus can do?

Sample contains Overlay data
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Trojan:Win32/SmokeLoader!pz?


File Info:
name: 7B00FE3C759D4E366E0B.mlw
path: /opt/CAPEv2/storage/binaries/304ba28f063a14bef7eb986ccd83cedf914b037418e5d5aa97754bc89efb3b99
crc32: 54048211
md5: 7b00fe3c759d4e366e0bf513081a7b6c
sha1: 98262536e471063c0460722f12b08ca3fa7b8f75
sha256: 304ba28f063a14bef7eb986ccd83cedf914b037418e5d5aa97754bc89efb3b99
sha512: 12813c590964e6fabd8c034bd0598cb3fc440f89eccb4a6c7e9c75054e7cb02b3fdaf07f77979eecf0bdc1269896626bf0da7d688562de74428f0a2b52c42333
ssdeep: 768:VWWlfk/lqXWHl/+MA3OxaVQvFT00i5EIS7kyL8Hyb:5dQj7A3O9GB5EIb
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14E13D0920531B4BFDA2443354033AF1AEA6EEA81ED4EDB4296B03DF075E6D17585B530
sha3_384: a2451d2dd49cab9b33109a59c33ea9539e4a5f34d67bba7880e50b0c807e463cd3cd62a6a8bbd54a4bddab9a94913fc1
ep_bytes: 7a72107e2a2d107c2c85290effba0f20
timestamp: 2023-11-23 12:48:36

Version Info:
0: [No Data]

Trojan:Win32/SmokeLoader!pz also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.SmokeLoader.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Lazy.338732
Skyhigh	BehavesLike.Win32.Generic.ph
McAfee	Artemis!7B00FE3C759D
Malwarebytes	Malware.AI.4032877444
Zillya	Trojan.Smokeloader.Win32.6302
Sangfor	Trojan.Win32.SmokeLoader.Vfyq
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/SmokeLoader.f6eb3614
K7GW	Trojan ( 00536d121 )
K7AntiVirus	Trojan ( 00536d121 )
Arcabit	Trojan.Lazy.D52B2C
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Smokeloader.F
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Packed.Smokeloader-10016651-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Lazy.338732
Avast	Win32:Evo-gen [Trj]
Tencent	Malware.Win32.Gencirc.13f94bc3
Emsisoft	Gen:Variant.Lazy.338732 (B)
F-Secure	Trojan.TR/Crypt.XPACK.Gen
VIPRE	Gen:Variant.Lazy.338732
TrendMicro	TROJ_GEN.R011C0DL623
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Varist	W32/SmokeLoader.G.gen!Eldorado
Avira	TR/Crypt.XPACK.Gen
Kingsoft	malware.kb.b.1000
Microsoft	Trojan:Win32/SmokeLoader!pz
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Lazy.338732
Google	Detected
AhnLab-V3	Trojan/Win.Generic.C5556219
BitDefenderTheta	Gen:NN.ZexaF.36680.ceX@aCXGtMd
MAX	malware (ai score=86)
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R011C0DL623
Rising	Trojan.Generic@AI.100 (RDML:5xMjWzfsXAlE6OhsPceJ6g)
Ikarus	Trojan.Win32.SmokeLoader
MaxSecure	Trojan.Malware.7164915.susgen
Fortinet	W32/Smokeloader.F!tr
AVG	Win32:Evo-gen [Trj]
Cybereason	malicious.6e4710
DeepInstinct	MALICIOUS

How to remove Trojan:Win32/SmokeLoader!pz?

Trojan:Win32/SmokeLoader!pz removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X