Malware

VirTool:Win32/Obfuscator.BZA (file analysis)

Malware Removal

The VirTool:Win32/Obfuscator.BZA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What VirTool:Win32/Obfuscator.BZA virus can do?

    How to determine VirTool:Win32/Obfuscator.BZA?

    
    

    File Info:

    crc32: D1E3F92B
    md5: b6ae27d3106ada86f2a7ed5b20135491
    name: B6AE27D3106ADA86F2A7ED5B20135491.mlw
    sha1: 4db464f70fa3ad581ad4fd125b3cc95df78dcfbf
    sha256: da5e0aabb0e34311ee57bbc4b87307e77e070eadcbac31efb63d36d009962ac4
    sha512: d3d4d3dcfc43d4ea5585053892e5f6a899c8ab210652e51a07210ff3b51d5fc51acd84c47781555a8dd58c27c5d6c7aa18d71364c455acfebec3e91e2e220978
    ssdeep: 3072:Gww7Xnozd0ZdOVKGDFOFD5xblUsOlIm1+9BULGvXB:xw7UdM4KeOFTblHOlIm1+XqGv
    type: PE32 executable (GUI) Intel 80386, for MS Windows

    Version Info:

    0: [No Data]

    VirTool:Win32/Obfuscator.BZA also known as:

    BkavW32.AIDetect.malware1
    K7AntiVirusTrojan ( 004bbdc81 )
    Elasticmalicious (high confidence)
    DrWebBackDoor.Spy.422
    CynetMalicious (score: 100)
    CAT-QuickHealTrojan.Mauvaise.SL1
    ALYacGen:Variant.Zegost.12
    CylanceUnsafe
    ZillyaTrojan.Staser.Win32.3665
    SangforTrojan.Win32.Save.a
    CrowdStrikewin/malicious_confidence_100% (W)
    AlibabaTrojan:Win32/Shifu.b7f206b1
    K7GWTrojan ( 004bbdc81 )
    Cybereasonmalicious.3106ad
    CyrenW32/Trojan.TCPK-8379
    SymantecSMG.Heur!gen
    ESET-NOD32a variant of Win32/Redosdru.KJ
    APEXMalicious
    AvastWin32:Malware-gen
    KasperskyTrojan.Win32.Shifu.fc
    BitDefenderGen:Variant.Zegost.12
    NANO-AntivirusTrojan.Win32.DUHB1574.dpuxdn
    MicroWorld-eScanGen:Variant.Zegost.12
    TencentTrojan.Win32.Staser.hj
    Ad-AwareGen:Variant.Zegost.12
    SophosMal/Generic-R + Troj/Zegost-GO
    ComodoTrojWare.Win32.Farfli.LK@4pmigc
    BitDefenderThetaAI:Packer.8AB6861C1F
    VIPRETrojan.Win32.Generic!BT
    TrendMicroBKDR_ZEGOST.SM38
    McAfee-GW-EditionBehavesLike.Win32.VirRansom.ch
    FireEyeGeneric.mg.b6ae27d3106ada86
    EmsisoftGen:Variant.Zegost.12 (B)
    SentinelOneStatic AI – Malicious PE
    JiangminTrojan/Staser.aji
    AviraTR/Dropper.Gen
    MicrosoftVirTool:Win32/Obfuscator.BZA
    AegisLabTrojan.Win32.Glomaru.mDOx
    ZoneAlarmTrojan.Win32.Shifu.fc
    GDataGen:Variant.Zegost.12
    AhnLab-V3Trojan/Win32.RL_Shifu.R368599
    Acronissuspicious
    McAfeeTrojan-FOEU!B6AE27D3106A
    MAXmalware (ai score=87)
    VBA32BScope.Backdoor.Farfli
    MalwarebytesMalware.AI.3655008701
    PandaTrj/Staser.B
    TrendMicro-HouseCallBKDR_ZEGOST.SM38
    RisingDropper.Generic!8.35E (CLOUD)
    YandexTrojan.GenAsa!45XhN69It/g
    IkarusTrojan.Win32.Redosdru
    FortinetW32/Redosdru.KJ!tr
    AVGWin32:Malware-gen
    Paloaltogeneric.ml
    Qihoo-360Win32/Trojan.Shifu.HwcB56cA

    How to remove VirTool:Win32/Obfuscator.BZA?

    VirTool:Win32/Obfuscator.BZA removal tool
    • Download and install GridinSoft Anti-Malware.
    • Open GridinSoft Anti-Malware and perform a “Standard scan“.
    • Move to quarantine” all items.
    • Open “Tools” tab – Press “Reset Browser Settings“.
    • Select proper browser and options – Click “Reset”.
    • Restart your computer.

    About the author

    Paul Valéry

    I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

    Leave a Comment