How to remove “Client-P2P.Win32.Winny.2b642”?

The Client-P2P.Win32.Winny.2b642 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Client-P2P.Win32.Winny.2b642 virus can do?

Unconventionial language used in binary resources: Japanese
Authenticode signature is invalid

How to determine Client-P2P.Win32.Winny.2b642?


File Info:
name: 865D9F687F1D5851B36D.mlw
path: /opt/CAPEv2/storage/binaries/a36b388d91469555004f7f5a4b2ee475b12bc9942e31fccb5d1395ccf6f14ff9
crc32: E0F9B8DD
md5: 865d9f687f1d5851b36df08ec8cd84c9
sha1: 64d9b82c873b8eebd86b2099fa109e6eadaa3d66
sha256: a36b388d91469555004f7f5a4b2ee475b12bc9942e31fccb5d1395ccf6f14ff9
sha512: 6c8a0573779ed7117206cda702be8934ee57b260209f1b166860313705e8ec5a0f983fcdb65b54f1accafd8d5e2528eee1e21e6f65c3ef1762fe1749ec3021d0
ssdeep: 49152:9R37PtBl/Rh9UzIhFJF6g7/yqCa5A8iKrP5XK1jCTxhVgtlXOutyuWqZ7s:sa9iKrP5XhKlXOE
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E1758E12BA41D47BD02223704D5FA7B9A975BF343A20494B37A85E0C6FB4BD07E1A397
sha3_384: 2ada133bdb0c73f3ab57a881a100e5c1642f344f8854fab239d1922a1f165187e97fb7f8a3733d639796078ac8dbc055
ep_bytes: eb1066623a432b2b484f4f4b90e99850
timestamp: 2003-08-29 00:47:43

Version Info:
CompanyName: 
FileDescription: 
FileVersion: 2.0.0.0
InternalName: 
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: 
ProductName: 
ProductVersion: 1.0.0.0
Comments: 
Translation: 0x0411 0x03a4

Client-P2P.Win32.Winny.2b642 also known as:

Bkav	W32.AIDetectMalware
Lionic	Riskware.Win32.Winny.1!c
Skyhigh	BehavesLike.Win32.PUP.th
Cylance	unsafe
Sangfor	Trojan.Win32.Agent.Vh5i
Kaspersky	not-a-virus:Client-P2P.Win32.Winny.2b642
NANO-Antivirus	Trojan.Win32.Winny.damwfl
Avast	Win32:TrojanX-gen [Trj]
Sophos	Generic Reputation PUA (PUA)
Jiangmin	Client-P2P.Winny.an
Google	Detected
Varist	W32/Winny.A.gen!Eldorado
Antiy-AVL	RiskWare[Client-P2P]/Win32.Winny
ZoneAlarm	not-a-virus:Client-P2P.Win32.Winny.2b642
Malwarebytes	Generic.Malware/Suspicious
TrendMicro-HouseCall	TROJ_GEN.R002H07EI23
MaxSecure	Trojan.Malware.187526870.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Client-P2P.Win32.Winny.2b642?

Client-P2P.Win32.Winny.2b642 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X