Malware

How to remove “Win32/Pterodo.AZD”?

Malware Removal

The Win32/Pterodo.AZD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Pterodo.AZD virus can do?

  • Detected script timer window indicative of sleep style evasion
  • Reads data out of its own binary image
  • A process created a hidden window
  • A scripting utility was executed
  • Uses Windows utilities for basic functionality
  • Deletes its original binary from disk
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Win32/Pterodo.AZD?


File Info:

crc32: 5B492579
md5: 46ff832257ef83ea719df55273c223b7
name: 46FF832257EF83EA719DF55273C223B7.mlw
sha1: 1cd05f9328e3cbb7354abe193f6463633c07186e
sha256: da44d2cc97a855a58c34980c0b627c76d928e05411f7060ebf907cb737fefee6
sha512: b60964efc006444d536fa2bbf230a474675278281c61fa763b561034d304d690dc49f8d801acc2ebaa917d3f9700a1317ef7f1405a2322791997f7eb321c13de
ssdeep: 6144:GmL+McrSW7MksP0SiU8ArCRTqc+ymhnyuNsPQDOnDIGUHRVxB7RAm61QnBuHBTp5:TRcrBMTPzI9+PhyueP+rH5VmnFvJZvv
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Pterodo.AZD also known as:

LionicTrojan.Script.Generic.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.47078511
ALYacTrojan.GenericKD.47078511
MalwarebytesTrojan.Script
SangforTrojan.Script.Generic.ky
AlibabaTrojan:Script/Pterodo.511ba6b4
K7GWTrojan ( 005883cc1 )
K7AntiVirusTrojan ( 005883cc1 )
ESET-NOD32a variant of Win32/Pterodo.AZD
APEXMalicious
AvastVBS:Obfuscated-gen [Trj]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Script.Generic
BitDefenderTrojan.GenericKD.47078511
ViRobotTrojan.Win32.Z.Pterodo.526055
Ad-AwareTrojan.GenericKD.47078511
BitDefenderThetaGen:NN.ZexaF.34170.G8Z@amYvo7
FireEyeGeneric.mg.46ff832257ef83ea
EmsisoftTrojan.GenericKD.47078511 (B)
AviraTR/Dropper.Gen
ArcabitTrojan.Generic.D2CE5C6F
ZoneAlarmHEUR:Trojan.Script.Generic
GDataWin32.Trojan.Agent.6D7RUB
AhnLab-V3Trojan/Win.Generic.C4660646
VBA32Trojan.Wacatac
MAXmalware (ai score=81)
IkarusTrojan.Win32.Pterodo
FortinetW32/Pterodo.AZD!tr
AVGVBS:Obfuscated-gen [Trj]
Paloaltogeneric.ml

How to remove Win32/Pterodo.AZD?

Win32/Pterodo.AZD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment