W97m.Downloader.IZA (file analysis)

The W97m.Downloader.IZA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What W97m.Downloader.IZA virus can do?

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine W97m.Downloader.IZA?


File Info:
crc32: 593509F2
md5: 116b757c9f9c5ef5931d3f9c054ae4e1
name: upload_file
sha1: 37ed9d7aac4c1c145884a005fd4d163a36d7b2e5
sha256: 40acf5c1261d6d9139f62df39cfae30d1514dc9b507ce21ac857069a62b2ad95
sha512: 4678d488832e98aa69915262aff62f4b9e1e5367d80a1921ce4126959dfa74fb4248c13cd5a0a71923e781d4a7149d654b1fcb74b62a78281c4cce6c8cb8d48e
ssdeep: 3072:NOr++urKzWWigMoP/8FJ94rf1nFJsVllZ1Uyi8UwdzhLYo/cNJivKie6B/w2yiWM:SJiP/w2PXCLpZY0tRhov
type: Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1252, Title: Consequuntur., Author: Jules Brun, Template: Normal.dotm, Revision Number: 1, Name of Creating Application: Microsoft Office Word, Create Time/Date: Tue Oct 20 07:24:00 2020, Last Saved Time/Date: Tue Oct 20 07:24:00 2020, Number of Pages: 1, Number of Words: 2599, Number of Characters: 14816, Security: 8

Version Info:
0: [No Data]

W97m.Downloader.IZA also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	W97m.Downloader.IZA
FireEye	W97m.Downloader.IZA
CAT-QuickHeal	W97M.Emotet.Heur
ALYac	W97m.Downloader.IZA
AegisLab	Trojan.MSWord.Generic.4!c
K7AntiVirus	Trojan ( 005703b31 )
K7GW	Trojan ( 005703b31 )
TrendMicro	Trojan.W97M.EMOTET.SMBA
Cyren	W97M/Downldr.IE.gen!Eldorado
Symantec	W97M.Downloader
TrendMicro-HouseCall	Trojan.W97M.EMOTET.SMBA
ClamAV	Doc.Dropper.EmotetiBlueUpdate1020-9780531-0
Kaspersky	HEUR:Trojan.MSOffice.SAgent.gen
BitDefender	W97m.Downloader.IZA
ViRobot	DOC.Z.Agent.173043.A
Tencent	Heur.Macro.Generic.h.47a2e49a
Ad-Aware	W97m.Downloader.IZA
Sophos	Mal/DocDl-K
Comodo	.UnclassifiedMalware@0
F-Secure	Malware.W97M/Agent.7845146
DrWeb	Exploit.Siggen2.52664
Invincea	Mal/DocDl-K
McAfee-GW-Edition	W97M/Downloader.dha
Emsisoft	Trojan-Downloader.Macro.Generic.BZ (A)
Avira	W97M/Agent.7845146
Microsoft	TrojanDownloader:O97M/Emotet.CSK!MTB
Arcabit	W97m.Downloader.IZA
ZoneAlarm	HEUR:Trojan.MSOffice.SAgent.gen
GData	Macro.Trojan-Downloader.Agent.AVL
Cynet	Malicious (score: 85)
AhnLab-V3	Downloader/MSOffice.Generic
McAfee	W97M/Downloader.dha
VBA32	TrojanDownloader.O97M.Emotet.CSK
ESET-NOD32	VBA/TrojanDownloader.Agent.USA
Rising	Malware.ObfusVBA@ML.82 (VBA)
SentinelOne	DFI – Malicious OLE
Fortinet	VBA/Agent.AVL!tr
Qihoo-360	virus.office.qexvmc.1090

How to remove W97m.Downloader.IZA?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

W97m.Downloader.IZA (file analysis)