Categories: Malware

Win32:Banker-IZK [Trj] information

The Win32:Banker-IZK [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32:Banker-IZK [Trj] virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Performs some HTTP requests
The executable is compressed using UPX
Sniffs keystrokes
Installs itself for autorun at Windows startup

Related domains:

migsel.com

edgedl.me.gvt1.com

update.googleapis.com

How to determine Win32:Banker-IZK [Trj]?


File Info:
crc32: 1D16EF29md5: 215175e7310531b9e424cb8ad6dc6058name: 215175E7310531B9E424CB8AD6DC6058.mlwsha1: 0de615a9915c77cd6241fa95e7dfa36228ca04ccsha256: cbfb37aa80241f13219dd80e61ffe320d10609a9eae2a3796586a10e676e3c39sha512: 33d8bae0aa511d553889cb30210a89bfc7e0f7a837463620583f9e78ed651d1394c3b5c15aeb31968a0b187d6a8c055ae16ce0c9dc1baf7dc33fc80b7843c312ssdeep: 3072:vHjk+0oLnWFnzBHv/xWFsg8WatFBGFVWPE5ac0pG/1z+QVMbg1jm0+Jm:Po/BHng5HaVG4G/1z+QVMbg1jv+stype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
0: [No Data]

Win32:Banker-IZK [Trj] also known as:

Bkav	W32.OverlayVM.PE
K7AntiVirus	Trojan ( 004bcce41 )
Elastic	malicious (high confidence)
DrWeb	BackDoor.BotSiggen.51
Cynet	Malicious (score: 100)
CAT-QuickHeal	Worm.Cambot.A3
ALYac	Trojan.GenericKD.40203996
Cylance	Unsafe
Zillya	Worm.VBNA.Win32.107271
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan ( 004bcce41 )
Cybereason	malicious.731053
Cyren	W32/Ulise.I.gen!Eldorado
Symantec	W32.Cambot
ESET-NOD32	Win32/Spy.VB.NNI
Zoner	Trojan.Win32.71058
APEX	Malicious
Avast	Win32:Banker-IZK [Trj]
ClamAV	Win.Trojan.Blackshades-6327385-1
Kaspersky	Trojan.Win32.Llac.llzl
BitDefender	Trojan.GenericKD.40203996
NANO-Antivirus	Trojan.Win32.VB.eccndn
ViRobot	Worm.Win32.A.VBNA.218120
MicroWorld-eScan	Trojan.GenericKD.40203996
Tencent	Malware.Win32.Gencirc.10b492db
Ad-Aware	Trojan.GenericKD.40203996
Sophos	ML/PE-A + Mal/VB-AQO
Comodo	Packed.Win32.MUPX.Gen@24tbus
BitDefenderTheta	AI:Packer.FDF1F86D21
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TSPY_VB_GA250A05.UVPM
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
FireEye	Generic.mg.215175e7310531b9
Emsisoft	Trojan.GenericKD.40203996 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Worm/VBNA.hbyc
Avira	TR/BAS.Samca.svreo
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.F624ED
Microsoft	Worm:Win32/Cambot.A
Gridinsoft	Trojan.Win32.VB.bot!s1
ZoneAlarm	Worm.Win32.VBNA.b
GData	Win32.Backdoor.Ainslot.C
AhnLab-V3	Worm/Win32.VBNA.C148121
Acronis	suspicious
McAfee	W32/Generic.worm!p2p.c
MAX	malware (ai score=80)
VBA32	Worm.VB.BlackControl
Malwarebytes	Cambot.Worm.Keylogger.DDS
TrendMicro-HouseCall	TSPY_VB_GA250A05.UVPM
Rising	Spyware.Agent!1.AE75 (CLASSIC)
Yandex	Worm.Cambot!NI2Uo2kkKjI
Ikarus	P2P-Worm.Win32.BlackControl
MaxSecure	Trojan.Llac.LLZL
Fortinet	W32/BotSiggen.AQO!tr
AVG	Win32:Banker-IZK [Trj]