VirTool.M0yv removal tips

The VirTool.M0yv is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What VirTool.M0yv virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine VirTool.M0yv?


File Info:
name: 355618B95361445BEF7F.mlw
path: /opt/CAPEv2/storage/binaries/93435727fbe066b681775d8b049c70d5dd7c482233fcccb61853ce6aea6a598f
crc32: 86B853DD
md5: 355618b95361445bef7fda41c0a71166
sha1: 4568b9466f22c001aabbe7f420a3a6a4ff954741
sha256: 93435727fbe066b681775d8b049c70d5dd7c482233fcccb61853ce6aea6a598f
sha512: d66e8ebcdcb09632d49e9d13476c82cf3e2c0e00065b556e2a2df7db8e779bade926b37ca2f5e1bcc868a9b4dc04260a6bac55d948f765a6238a81ebded0fbf1
ssdeep: 49152:8rW6uSLYnPuGDgrq/X0/lON9L7jk4o4T2/ZnBPHdjQj9lNw5O:yWpgrq/fNNbT2/1B/dEN
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EA85E1227AF1D073C27306309E29ABB056F9BDB15831460F73D42E2DADB49C1A939767
sha3_384: fa41e877e7579f813cd03593ac43c7b631acdf13caa9a20d4bb3e7a08ef05f4c0b62d5f01a0bdb2bb0e25a8357726128
ep_bytes: e8c8fc0000e989feffff8b54240c8b4c
timestamp: 2021-08-25 08:39:12

Version Info:
FileDescription: recoverit_setup_full4174.exe
FileVersion: 3.0.3.4
LegalCopyright: Copyright©2017 Wondershare. All rights reserved.
ProductName: Recoverit
ProductVersion: 10.0.2
Translation: 0x0409 0x04b0

VirTool.M0yv also known as:

Bkav	W32.AIDetectMalware
Lionic	Virus.Win32.Moiva.n!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Win32.Expiro.Gen.7
FireEye	Generic.mg.355618b95361445b
CAT-QuickHeal	W32.Expiro.R3
ALYac	Win32.Expiro.Gen.7
Cylance	unsafe
VIPRE	Win32.Expiro.Gen.7
Sangfor	Virus.Win32.Expiro.Vkrc
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Virus:Win32/Moiva.74843eae
K7GW	Virus ( 005a8b911 )
K7AntiVirus	Virus ( 005a8b911 )
Cyren	W32/Expiro.AU.gen!Eldorado
Symantec	W32.Xpiro.J!dam
ESET-NOD32	a variant of Win32/Expiro.NDP
APEX	Malicious
Kaspersky	Virus.Win32.Moiva.a
BitDefender	Win32.Expiro.Gen.7
NANO-Antivirus	Virus.Win32.Virut-Gen.bwpxnc
Avast	Win32:FileInfector-C [Heur]
Tencent	Virus.Win32.VirMoiva.a
TACHYON	Virus/W32.Movia
Emsisoft	Win32.Expiro.Gen.7 (B)
F-Secure	Malware.W32/Infector.Gen
DrWeb	Win32.Expiro.158
TrendMicro	Virus.Win32.EXPIRO.JMA
McAfee-GW-Edition	BehavesLike.Win32.Sality.tc
Sophos	W32/Moiva-A
SentinelOne	Static AI – Malicious PE
GData	Win32.Expiro.Gen.7
Avira	W32/Infector.Gen
Antiy-AVL	Virus/Win32.Expiro.x
Xcitium	Malware@#2w1c9x4tdirlh
Arcabit	Win32.Expiro.Gen.7
ZoneAlarm	Virus.Win32.Moiva.a
Microsoft	Virus:Win32/Expiro.NDP!MTB
Google	Detected
AhnLab-V3	Virus/Win.Expiro.X2164
Acronis	suspicious
MAX	malware (ai score=83)
VBA32	Trojan.Sabsik.TE
Malwarebytes	VirTool.M0yv
Panda	W32/Moyv.A
Rising	Trojan.Generic@AI.81 (RDML:HmXpRZ4V/NbaqSdwCdnGkQ)
Ikarus	Trojan.Patched
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Expiro.NDP!tr
AVG	Win32:FileInfector-C [Heur]
DeepInstinct	MALICIOUS

How to remove VirTool.M0yv?

VirTool.M0yv removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X