Should I remove “Trojan:Win32/Webprefix!pz”?

The Trojan:Win32/Webprefix!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Webprefix!pz virus can do?

Sample contains Overlay data
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary file triggered YARA rule
Anomalous binary characteristics

How to determine Trojan:Win32/Webprefix!pz?


File Info:
name: A4B1CBB7000008BDE2DA.mlw
path: /opt/CAPEv2/storage/binaries/a0d8915f6cbc88e2df431eab2c3a180663542d8eda2f3b8356fe9ec41eb1f436
crc32: A42EE777
md5: a4b1cbb7000008bde2da908f2bc1706d
sha1: c96e470b0e2e340dda8e21bd79077bdbc05c0032
sha256: a0d8915f6cbc88e2df431eab2c3a180663542d8eda2f3b8356fe9ec41eb1f436
sha512: 145dec4edec97a5988872a3001e6f9525a717be9e2d11985b3760b3ce0cfc5a5d48e17bd5346a4882da654148b6c02f7e4b1d03b52c998b32bda69a72baeceee
ssdeep: 3072:kHk6Dl5oFIeOGvVBhECSwCjZcyRgqx+9O6UF9b:qgj9VbEvjZcwgqxJ6UFl
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CDB38C2338C6D072E02210BA8891C577EA67F8785B361CC77BC8556A5F761939E7CB0B
sha3_384: 5314a70549b8b94dafaf9eb48c30856135f99bcd498e57f29d2d1b30905377539dc8304845b41768b7482ec455ebeb37
ep_bytes: e8513b0000e978feffffcc6800714100
timestamp: 2011-04-16 01:07:07

Version Info:
0: [No Data]

Trojan:Win32/Webprefix!pz also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Webprefix.lnbj
MicroWorld-eScan	Gen:Variant.Poseidon.34
FireEye	Generic.mg.a4b1cbb7000008bd
CAT-QuickHeal	Trojan.GenericPMF.S21192066
Skyhigh	BehavesLike.Win32.Backdoor.ch
McAfee	Downloader-CMM
Zillya	Trojan.Webprefix.Win32.7842
Sangfor	Trojan.Win32.Save.a
Alibaba	TrojanDownloader:Win32/Klevate.6b6d0ca6
Cybereason	malicious.700000
VirIT	Trojan.Win32.Webprefix.ASA
Symantec	Downloader
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Webprefix.A
APEX	Malicious
TrendMicro-HouseCall	TROJ_WPREF.SMUJ
ClamAV	Win.Downloader.Webprefix-9927161-0
Kaspersky	Trojan-Downloader.Win32.Klevate.bp
BitDefender	Gen:Variant.Poseidon.34
NANO-Antivirus	Trojan.Win32.Katusha.cssymq
Avast	Win32:Webprefix [Trj]
Tencent	Trojan.Win32.Webprefix.av
Emsisoft	Gen:Variant.Poseidon.34 (B)
Baidu	Win32.Trojan.Webprefix.d
F-Secure	Trojan.TR/Dldr.Agent.gtb
DrWeb	Trojan.Webprefix.15
VIPRE	Gen:Variant.Poseidon.34
TrendMicro	TROJ_WPREF.SMUJ
Trapmine	malicious.high.ml.score
Sophos	Troj/WebPrefi-B
Ikarus	Trojan.Win32.Webprefix
Jiangmin	Trojan/Webprefix.ao
Google	Detected
Avira	TR/Dldr.Agent.gtb
Varist	W32/Katusha.F.gen!Eldorado
Antiy-AVL	Trojan/Win32.Webprefix.a
Kingsoft	Win32.Troj.Undef.a
Microsoft	Trojan:Win32/Webprefix!pz
Xcitium	TrojWare.Win32.Webprefix.N@39cylc
Arcabit	Trojan.Poseidon.34
ViRobot	Trojan.Win32.A.Webprefix.128000.D
ZoneAlarm	Trojan-Downloader.Win32.Klevate.bp
GData	Win32.Trojan.PSE.1LQX09G
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Webprefix.R4635
ALYac	Gen:Variant.Poseidon.34
MAX	malware (ai score=99)
Malwarebytes	Webprefix.Trojan.Dropper.DDS
Panda	Generic Malware
Rising	Trojan.Generic@AI.97 (RDML:O9WNrBxscjnp8ZkOyhLNQw)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.11105469.susgen
Fortinet	W32/Katusha.CB!tr
AVG	Win32:Webprefix [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)
alibabacloud	Trojan

How to remove Trojan:Win32/Webprefix!pz?

Trojan:Win32/Webprefix!pz removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X