Malware

Chinky.7 (B) removal tips

Malware Removal

The Chinky.7 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Chinky.7 (B) virus can do?

  • Executable code extraction
  • Expresses interest in specific running processes
  • Reads data out of its own binary image
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Attempts to disable Windows Auto Updates
  • Creates a slightly modified copy of itself
  • Anomalous binary characteristics
  • Attempts to modify Explorer settings to prevent hidden files from being displayed

Related domains:

ns1.spansearcher.net

How to determine Chinky.7 (B)?


File Info:

crc32: 57D77C64
md5: 054197fa9ad284b90990cbeca622a9a0
name: 054197FA9AD284B90990CBECA622A9A0.mlw
sha1: a9d1303c88b5ceb953835722ef7f168d488bc10b
sha256: eac31c91271e14f8250f1ef569a15e715bc1a661c323c1efd6124b68fa2a304f
sha512: a94ac8257e3872841c9b1c1ab4257e02ecb9394bf175153e69f946959efd089f4c2250c8ce5977b32ac8125894317366bca623fff8b6ab8bfdb6b8397645838e
ssdeep: 6144:wWjhNVYD3XHLB8+koWz+QG41X6zn9oba8lG:wW3VYT7B8+kNzpGnS+8I
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
ProductVersion: 1.00
InternalName: bvVoFMhr
FileVersion: 1.00
OriginalFilename: bvVoFMhr.exe
ProductName: RDOKID

Chinky.7 (B) also known as:

BkavW32.VBFakeFolderMassiveDPC.Worm
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Chinky.7
FireEyeGeneric.mg.054197fa9ad284b9
CAT-QuickHealTrojan.Beebone.D
ALYacGen:Variant.Chinky.7
CylanceUnsafe
VIPREWorm.Win32.Vobfus.gensa (v)
SangforMalware
K7AntiVirusEmailWorm ( 0054d10f1 )
BitDefenderGen:Variant.Chinky.7
K7GWEmailWorm ( 0054d10f1 )
Cybereasonmalicious.a9ad28
BaiduWin32.Worm.Pronny.d
CyrenW32/Vobfus.BE.gen!Eldorado
SymantecW32.Changeup
TotalDefenseWin32/Vobfus.AGN
APEXMalicious
AvastWin32:Regrun-MM [Trj]
ClamAVWin.Trojan.VB-1694
KasperskyTrojan.Win32.Scar.gbhp
NANO-AntivirusTrojan.Win32.VB.covktw
ViRobotTrojan.Win32.A.Scar.389120.D
RisingWorm.VobfusEx!1.99DB (CLASSIC)
Ad-AwareGen:Variant.Chinky.7
EmsisoftGen:Variant.Chinky.7 (B)
ComodoWorm.Win32.Pronny.AK@4ogvoo
F-SecureTrojan.TR/Regrun.MO
DrWebTrojan.VbCrypt.81
TrendMicroWORM_VOBFUS.SMAB
McAfee-GW-EditionBehavesLike.Win32.VBObfus.fh
SophosML/PE-A + Mal/VBCheMan-B
SentinelOneStatic AI – Malicious PE – Worm
JiangminTrojan/Scar.badi
AviraTR/Regrun.MO
MAXmalware (ai score=84)
Antiy-AVLWorm/Win32.WBNA.gen
MicrosoftWorm:Win32/Vobfus
ArcabitTrojan.Chinky.7
SUPERAntiSpywareTrojan.Agent/Gen-Autorun[VB]
ZoneAlarmTrojan.Win32.Scar.gbhp
GDataGen:Variant.Chinky.7
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Menti.R21623
Acronissuspicious
McAfeeGeneric VB.kk
TACHYONTrojan/W32.VB-Menti.389120
VBA32BScope.Trojan.Downloader
MalwarebytesGeneric.Trojan.Malicious.DDS
PandaTrj/Genetic.gen
ESET-NOD32Win32/AutoRun.VB.ASQ
TrendMicro-HouseCallWORM_VOBFUS.SMAB
TencentWorm.Win32.Vobfus.n
YandexTrojan.GenAsa!S4nLwk2Lx5Y
IkarusTrojan-PSW.Fareit
MaxSecureVirus.Virus.W32.VB.R6
FortinetW32/VBKrypt.C!tr
BitDefenderThetaGen:NN.ZevbaF.34804.xm0@ay@67toi
AVGWin32:Regrun-MM [Trj]
CrowdStrikewin/malicious_confidence_80% (D)
Qihoo-360HEUR/QVM03.0.08A1.Malware.Gen

How to remove Chinky.7 (B)?

Chinky.7 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment