Application.WpaKill.G (B) malicious file

The Application.WpaKill.G (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Application.WpaKill.G (B) virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• A process attempted to delay the analysis task.
• Dynamic (imported) function loading detected
• Enumerates running processes
• Expresses interest in specific running processes
• CAPE extracted potentially suspicious content
• Authenticode signature is invalid
• Code injection with CreateRemoteThread in a remote process
• Behavioural detection: Injection (inter-process)
• Behavioural detection: Injection with CreateRemoteThread in a remote process
• Installs itself for autorun at Windows startup
• Operates on local firewall’s policies and settings
• Attempts to disable UAC
• Attempts to modify or disable Security Center warnings
• Attempts to modify Explorer settings to prevent hidden files from being displayed

How to determine Application.WpaKill.G (B)?

File Info:
name: 83D4EF3547661652B5BB.mlw
path: /opt/CAPEv2/storage/binaries/ddc8f9ac172d28d021c411e56ed93d6aee25a97fd38ba81ff5c1743d99443480
crc32: E3E8A2D1
md5: 83d4ef3547661652b5bb534b1443422a
sha1: 13d8c562cac1ea9c406e23d3b6cdd425b99fa07e
sha256: ddc8f9ac172d28d021c411e56ed93d6aee25a97fd38ba81ff5c1743d99443480
sha512: 93a64ef25ec1b67fc08052e6d0faf53f81d63b2121876485b4437a834638d418b02ebd362b4c69a917df6ed3262bba1ea34a054b5dfc6450c10a71ec0c1ee150
ssdeep: 196608:XO1vl2r4a7SdzRDymXLa4mnb0DtUog3jCUE2nKNfMILF9UBDHLSwxT1aQhS:wt2D7Sd1ymX+4mnOU9+UCZM6kzWu12
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F5A6338270D084FBDC2538F4855B167325A2DD1E9E40AA5352F8F92D84F54A3ED2AE3F
sha3_384: 6cf272a6cfa231a1549284a7f5efba1fb136c5aaaf0dd42bb77cfc0a006c82481c127ddeb3916acb9f17dc47b36950ec
ep_bytes: 88d914b38d15bca6f1e2c6c4fb84cbc6
timestamp: 2009-06-23 17:57:07

Version Info:
Comments: Created with AutoPlay Media Studio (www.indigorose.com)
CompanyName: Anemeros Software
FileDescription: The Perpetuation Endeavor
FileVersion: 0.9.0.0
InternalName: ams60_launch
LegalCopyright: Copyright (c) 2009 - Anemeros Software
LegalTrademarks: Chew-WGA
OriginalFilename: cw.exe
ProductName: Chew-WGA v0.9
ProductVersion: 0.9.0.0
Translation: 0x0409 0x0000

Application.WpaKill.G (B) also known as:

How to remove Application.WpaKill.G (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.