Virus

Virus.Virlock.01 removal guide

Malware Removal

The Virus.Virlock.01 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Virus.Virlock.01 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • At least one process apparently crashed during execution
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Virus.Virlock.01?


File Info:

name: 5FD4632AE243E075B58E.mlw
path: /opt/CAPEv2/storage/binaries/24b689b362f507ad2b23fc03596045a2668cbb5b99c4d086ff50fdf6de42ea56
crc32: F08D8AA3
md5: 5fd4632ae243e075b58e95bbef34fd40
sha1: 3008630130afdbb7d59268bdfe4dda6a8af7aac2
sha256: 24b689b362f507ad2b23fc03596045a2668cbb5b99c4d086ff50fdf6de42ea56
sha512: 6939b18a6684b1101c0106642d49ce356d302e92e01ab9389dc310dffcbd9d4ef7205e9b85abac5577ad563d87aecf7629191406df74b1359633b459ce518f61
ssdeep: 12288:B+1EjTWJJM/YU6+xKexI3YdYjSDiwZiJPvYiFr2uXOyq+ETLoJ+l:BQgS/MAU943YdKqSPwK2uXOT/j
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T184E4D0A611892205DDF9EEFB0074826630D6687D4BF9C2EB196246DDD24B1F08CF8BDD
sha3_384: b5dd8024df7fafbcae3444cc87acb9a8d633976201377910c6b4581166fefcdae49ddb7595b677a0e56a78e2db863ff7
ep_bytes: 83ec34e8edb80a00e901000000c3e8dc
timestamp: 2015-02-07 09:53:36

Version Info:

0: [No Data]

Virus.Virlock.01 also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Generic.mt7t
Elasticmalicious (high confidence)
MicroWorld-eScanWin32.Virlock.Gen.3
FireEyeGeneric.mg.5fd4632ae243e075
ALYacWin32.Virlock.Gen.3
VIPREVirus.Win32.Nabucur.c (v)
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0040fa5c1 )
BitDefenderWin32.Virlock.Gen.3
K7GWTrojan ( 0040fa5c1 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaAI:FileInfector.AE99F02013
CyrenW32/S-11daff79!Eldorado
SymantecW32.Virlock!gen1
ESET-NOD32a variant of Win32/Virlock.J
BaiduWin32.Virus.Virlock.e
TrendMicro-HouseCallPE_VIRLOCK.A-O
ClamAVWin.Virus.Virlock-6804475-0
KasperskyVirus.Win32.PolyRansom.f
AlibabaRansom:Win32/PolyRansom.7070bc24
NANO-AntivirusVirus.Win32.Virlock.dsdros
Ad-AwareWin32.Virlock.Gen.3
SophosML/PE-A + W32/VirRnsm-E
ComodoVirus.Win32.VirLock.GA@7lv9go
DrWebWin32.VirLock.16
ZillyaVirus.Virlock.Win32.2
TrendMicroPE_VIRLOCK.A-O
SentinelOneStatic AI – Malicious PE
EmsisoftWin32.Virlock.Gen.3 (B)
APEXMalicious
JiangminWin32/Polyransom.f
AviraTR/Crypt.ZPACK.Gen
MAXmalware (ai score=82)
Antiy-AVLTrojan/Generic.ASVirus.1FC
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GDataWin32.Virlock.Gen.3
CynetMalicious (score: 100)
AhnLab-V3Win32/Nabucur.D.X1506
Acronissuspicious
McAfeeW32/VirRansom.b!5FD4632AE243
TACHYONVirus/W32.VirRansom.D
VBA32Virus.Virlock.gen.01
PandaTrj/Genetic.gen
TencentVirus.Win32.Polyransom.f
IkarusVirus.Win32.Virlock
MaxSecureVirus.PolyRansom.b
FortinetW32/Virlock.B
AVGWin32:Nabucur-C [Trj]

How to remove Virus.Virlock.01?

Virus.Virlock.01 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment