Dropped:Win32.Virlock.Gen.4 information

The Dropped:Win32.Virlock.Gen.4 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Dropped:Win32.Virlock.Gen.4 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• A file was accessed within the Public folder.
• Uses Windows utilities for basic functionality
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Uses Windows utilities to create a scheduled task
• Deletes executed files from disk
• Attempts to disable UAC
• Anomalous binary characteristics
• Attempts to modify Explorer settings to prevent file extensions from being displayed
• Attempts to modify Explorer settings to prevent hidden files from being displayed
• Uses suspicious command line tools or Windows utilities

How to determine Dropped:Win32.Virlock.Gen.4?

File Info:
name: DF3B27432F87CBFEB0A8.mlw
path: /opt/CAPEv2/storage/binaries/15fa20e389c6bc1c2a4f65eba9f80907110b2926e8b1fa1e74707b9a93ce3665
crc32: 1FCD4A71
md5: df3b27432f87cbfeb0a85416f470e557
sha1: b941be9f32c431f89fb773c582286f25ca2a805a
sha256: 15fa20e389c6bc1c2a4f65eba9f80907110b2926e8b1fa1e74707b9a93ce3665
sha512: d2e6842bb0f981773aa1ba259590fb27f163c3cdc067cf9a33b846b6ecb3c3e568d82e42fea025dd43c6a1bc45c3f7e1c199c436190933f477fd3e1aab1c3440
ssdeep: 3072:mzMi6T1oY517JQY5AJy5FoZhwHPk6TLu/8uzecdV/Klrv:JiUoq7FJPAUuvjIj
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12DD3CEB6AA459772F53B4B352FD7A226AA257D2F3370A52C84460E0F741A0F6D8D703C
sha3_384: e908235eed1265769b04f0d5e575d487bee3993c7bf0405603503183cdf41b2b1182fdc26029e3c97acd5efe8c50a96a
ep_bytes: bae0a90800b8a055070081ea068e0400
timestamp: 1970-01-01 00:02:03

Version Info:
0: [No Data]

Dropped:Win32.Virlock.Gen.4 also known as:

How to remove Dropped:Win32.Virlock.Gen.4?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.