Categories: Malware

Dropped:Win32.Elkern.B (B) removal tips

The Dropped:Win32.Elkern.B (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Dropped:Win32.Elkern.B (B) virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Uses Windows utilities to create a scheduled task

How to determine Dropped:Win32.Elkern.B (B)?


File Info:
name: 48223C3BDE8D774DFACB.mlwpath: /opt/CAPEv2/storage/binaries/66ed539fb984f8a14b4aae6c81df9b00777d2739b159885a6aa6add83ddc5d23crc32: 28B4060Emd5: 48223c3bde8d774dfacb9a193c195820sha1: fe7db55da7f7590f75618df2489293970c35e3d1sha256: 66ed539fb984f8a14b4aae6c81df9b00777d2739b159885a6aa6add83ddc5d23sha512: b02d278ac2cc8eb2c134f4e15cb93d51fd86ed3d4cbfa3837be4a8139eb2e5747100495e81e943baeaee0d94d4ceb3a02e72e459c001555518a471ac6e1b0433ssdeep: 1536:zaWLF1kxTnUI4CFPtv6iSJnaGlbVxhoEInj:zaWExTnUTCFPtvanaGlbVxho7ntype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1E3839F237A90C473C4A68670016ADB155EFFED310B6AE583D7148A5F3D70AE1EA3931Bsha3_384: 609c75f514e67047c4b2c18cfcc540a7a653727a8df63b543b26fd954a769a9da6ba7074da82a9326ab209b1a1d9c56cep_bytes: 558bec6aff6838d240006874a8400064timestamp: 2002-01-18 01:22:13
Version Info:
0: [No Data]

Dropped:Win32.Elkern.B (B) also known as:

Bkav	W32.AIDetectMalware
Lionic	Worm.Win32.Klez.t!c
Elastic	malicious (high confidence)
DrWeb	Win32.HLLM.Klez.6
MicroWorld-eScan	Dropped:Win32.Elkern.B
FireEye	Generic.mg.48223c3bde8d774d
CAT-QuickHeal	W32.Klez.H
Skyhigh	BehavesLike.Win32.Klez.mh
McAfee	W32/Klez.f@MM
Malwarebytes	Klez.Worm.FileInfector.DDS
VIPRE	Dropped:Win32.Elkern.B
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	EmailWorm ( 000805561 )
K7GW	EmailWorm ( 000805561 )
Cybereason	malicious.bde8d7
BitDefenderTheta	Gen:NN.ZexaF.36802.fqY@aa5cMjd
VirIT	Worm.Win32.Klez.J
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Klez
APEX	Malicious
TrendMicro-HouseCall	WORM_KLEZ.GEN
ClamAV	Win.Worm.Klez-2
Kaspersky	Email-Worm.Win32.Klez.j
BitDefender	Dropped:Win32.Elkern.B
NANO-Antivirus	Trojan.Win32.Klez.fwaj
SUPERAntiSpyware	Worm.Kelz
Avast	Win32:Klez-E [Wrm]
Tencent	Worm.Win32.Klez.c
Emsisoft	Dropped:Win32.Elkern.B (B)
Google	Detected
F-Secure	Worm.WORM/Klez.E
Baidu	Win32.Worm.Klez.a
Zillya	Worm.Klez.Win32.4
TrendMicro	WORM_KLEZ.GEN
Trapmine	malicious.high.ml.score
Sophos	W32/Klez-Fam
Ikarus	Email-Worm.Win32.Klez.J
Jiangmin	I-Worm/Klez.h
Varist	W32/Klez.J@mm
Avira	WORM/Klez.E
Antiy-AVL	Worm[Email]/Win32.Klez
Kingsoft	malware.kb.a.1000
Microsoft	Worm:Win32/Klez.G@mm
Xcitium	TrojWare.Win32.Trojan.Agent.Gen@67u02
Arcabit	Win32.Elkern.B
ViRobot	I-Worm.Win32.Klez-gen
ZoneAlarm	Email-Worm.Win32.Klez.j
GData	Win32.Trojan.PSE.11SQ9WV
Cynet	Malicious (score: 100)
AhnLab-V3	Win32/Klez.worm.I
Acronis	suspicious
VBA32	BScope.Trojan.Meredrop
ALYac	Dropped:Win32.Elkern.B
MAX	malware (ai score=80)
Cylance	unsafe
Panda	W32/Klez.H
Zoner	Worm.Win32.Klez.27775
Rising	Worm.Klez!1.A1CB (CLASSIC)
Yandex	I-Worm.Klez!eyCb9GPjnEw
SentinelOne	Static AI – Malicious PE
MaxSecure	Worm.W32.Klez.h
Fortinet	W32/Klez.fam@mm
AVG	Win32:Klez-E [Wrm]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)
alibabacloud	Worm:Win/Klez.3431e10f