How to remove “Trojan:Win32/Vindor!pz.dam#2”?

The Trojan:Win32/Vindor!pz.dam#2 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Vindor!pz.dam#2 virus can do?

Sample contains Overlay data
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan:Win32/Vindor!pz.dam#2?


File Info:
name: E481976149AB9AE153B2.mlw
path: /opt/CAPEv2/storage/binaries/4b3be59ba74052edf9d99cb9541c9fa4d9ea5a826d3f2930b09a58d6094e6ee2
crc32: 2A28DF50
md5: e481976149ab9ae153b2f4eb288c8dd3
sha1: 65a33549e8b2131baf2b4a080b243e08ac17c817
sha256: 4b3be59ba74052edf9d99cb9541c9fa4d9ea5a826d3f2930b09a58d6094e6ee2
sha512: 1b023c0f7d0453d7235cf92806fe3b97221c6e852bf043c6d0d9a2ee55578a14101c743886b8016ed42b34d31f4f20ec7727f336462c54934402b195c237b920
ssdeep: 384:w3T3oYQy2gx/HXsZECSMyeWt8CnLiSFE0FwlvUMEAvZOXwIvmy7JfEWqNY:coYFBH8emyeC8CLiSFfwlcMEAvkmoBYy
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13492C0F2822E75E6FA6DA4FF915DC0C6DEB9597112734A099FE01A9E5080A480EF2D24
sha3_384: 6b9585469f6ff42e7324b89be8793873278fb851b8b2690adae75d4e59ad8753d6f06f0025ff60be3a48655ca920221b
ep_bytes: 
timestamp: 2015-01-28 13:36:24

Version Info:
0: [No Data]

Trojan:Win32/Vindor!pz.dam#2 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.lAoR
Elastic	malicious (high confidence)
FireEye	Generic.mg.e481976149ab9ae1
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (D)
Alibaba	TrojanPSW:Win32/Damaged.5dd35172
Cyren	W32/Heuristic-CO3!Eldorado
Symantec	SMG.Heur!gen
tehtris	Generic.Malware
APEX	Malicious
NANO-Antivirus	Virus.Win32.Gen.ccmw
DrWeb	Trojan.DownLoader12.31656
McAfee-GW-Edition	BehavesLike.Win32.Generic.lc
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
GData	Win32.Trojan.Agent.TL7HLD
Xcitium	Heur.Corrupt.PE@1z141z3
Microsoft	Trojan:Win32/Vindor!pz.dam#2
Google	Detected
Malwarebytes	Generic.Malware.AI.DDS
Rising	Trojan.Generic@AI.100 (RDML:pl45sw3IrR2fxo9zMk+y6A)
Ikarus	Trojan.PSW.QQSteal
MaxSecure	Banker.Win64.Emotet.sb
Fortinet	Malicious_Behavior.SB
Cybereason	malicious.9e8b21
DeepInstinct	MALICIOUS

How to remove Trojan:Win32/Vindor!pz.dam#2?

Trojan:Win32/Vindor!pz.dam#2 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X