Trojan

Trojan:Win32/Wzizh.EC!MTB removal instruction

Malware Removal

The Trojan:Win32/Wzizh.EC!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Wzizh.EC!MTB virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Trojan:Win32/Wzizh.EC!MTB?


File Info:

name: 6253ABDDF646E0A521E4.mlw
path: /opt/CAPEv2/storage/binaries/29c02397c9941d97dba18607d0f819b338162ee9fa063d4b84e34ee838de605c
crc32: 2BBCD544
md5: 6253abddf646e0a521e427d567b352e3
sha1: 3345de9530cdffbb588db0e7ef11ad9eb9bf4f4f
sha256: 29c02397c9941d97dba18607d0f819b338162ee9fa063d4b84e34ee838de605c
sha512: 8d9e2fd2f934cde0c0c639700c99b1df145fc2e16360a772758d00c1fc14beee9d2b550124b483cd9cdcd027800575c1294030affc775dc865ed8c936b72fbc0
ssdeep: 768:o6XbaKCyBcZ2KdHPP3lLuzZPKqw98Vg4I5Rm:o6XbaK9Bc9dHPP3lLuBZw98a4n
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T17AE2B999BE444CFBD950273890E7C77B2A7CF181C6234B62F650F7315A237A1219B16E
sha3_384: abb6df0396030efa1f31feb83e01b40724857cfce11bb358879d150c6528428fd34cc5ce231a74f89876f205795f4631
ep_bytes: 57565383ec108b5c24248b7424208b7c
timestamp: 2024-02-09 12:30:39

Version Info:

0: [No Data]

Trojan:Win32/Wzizh.EC!MTB also known as:

LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanGen:Variant.Fragtor.503130
FireEyeGen:Variant.Fragtor.503130
CAT-QuickHealTrojan.Agent
SkyhighBehavesLike.Win32.Injector.nm
McAfeeGenericRXWN-OT!6253ABDDF646
Cylanceunsafe
SangforTrojan.Win32.Agent.V9du
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Injector.da44a398
K7GWTrojan ( 005b1a3e1 )
K7AntiVirusTrojan ( 005b1a3e1 )
ArcabitTrojan.Fragtor.D7AD5A
BitDefenderThetaGen:NN.ZedlaF.36744.b46@a0OIDOg
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.ETQB
CynetMalicious (score: 99)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Fragtor.503130
AvastWin32:TrojanX-gen [Trj]
TencentWin32.Trojan.Generic.Ltgl
EmsisoftGen:Variant.Fragtor.503130 (B)
F-SecureTrojan.TR/Agent_AGen.pjskq
VIPREGen:Variant.Fragtor.503130
SophosMal/Generic-S
VaristW32/Agent.IHW.gen!Eldorado
AviraTR/Agent_AGen.pjskq
Antiy-AVLGrayWare/Win32.Wacapew
MicrosoftTrojan:Win32/Wzizh.EC!MTB
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Variant.Fragtor.503130
GoogleDetected
AhnLab-V3Trojan/Win.Generic.R634664
VBA32BScope.Trojan.Fsysna
ALYacGen:Variant.Fragtor.503130
MAXmalware (ai score=88)
MalwarebytesTrojan.Injector
PandaTrj/Chgt.AD
RisingTrojan.Agent!8.B1E (CLOUD)
IkarusTrojan.Win32.Agent
MaxSecureTrojan.Malware.233169429.susgen
FortinetW32/Agent.DDP!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS

How to remove Trojan:Win32/Wzizh.EC!MTB?

Trojan:Win32/Wzizh.EC!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment