Should I remove “Dropped:Win32.Virlock.Gen.4”?

The Dropped:Win32.Virlock.Gen.4 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Dropped:Win32.Virlock.Gen.4 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• A file was accessed within the Public folder.
• Uses Windows utilities for basic functionality
• Reads data out of its own binary image
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• A scripting utility was executed
• Uses Windows utilities to create a scheduled task
• Checks for the presence of known devices from debuggers and forensic tools
• Checks for the presence of known devices from debuggers and forensic tools
• Deletes executed files from disk
• Attempts to disable UAC
• Anomalous binary characteristics
• Attempts to modify Explorer settings to prevent file extensions from being displayed
• Attempts to modify Explorer settings to prevent hidden files from being displayed
• Uses suspicious command line tools or Windows utilities

How to determine Dropped:Win32.Virlock.Gen.4?

File Info:
name: 382260B38D14002915F8.mlw
path: /opt/CAPEv2/storage/binaries/8b1fe74c1d07a2e6ee8e755fdd596e5a951b6b23153706e0c052abd741ddd3a0
crc32: 707DE51F
md5: 382260b38d14002915f885624b22bd1d
sha1: a2d53bd1721d5e6633772bfa4159bfd422c5adc4
sha256: 8b1fe74c1d07a2e6ee8e755fdd596e5a951b6b23153706e0c052abd741ddd3a0
sha512: f6a5c37b27f2652ff9128fa3031ee6a91617c3bf55fb217cc8e4885493b684e50f60c23ddfdfed8d00a45f3ffacc577b8802e59ef8c42f75421c0031c05913e9
ssdeep: 3072:c16Y5h1gfWX4/37dl+BBRv6BV9fIR/9OoVHueCjJDWgUQ:hYZgfWX4z+BBRa9fIR/9OiObjRWgUQ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T114C3DF2B7FA7EF39D061843B79AD30092778868528F28F18F55D04CA46454EF49D3BB6
sha3_384: c40f6f83533b7ee2cc0cbcad4b9b5ee5361dd0a1d56821f43df4924406b465a5834f2956d635f5de674e31338b9c881f
ep_bytes: ba12fc0100be5a3b0b0081c2c65f0300
timestamp: 1970-01-01 00:02:03

Version Info:
0: [No Data]

Dropped:Win32.Virlock.Gen.4 also known as:

How to remove Dropped:Win32.Virlock.Gen.4?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.