Virus

Virus.Win32.Expiro.rc malicious file

Malware Removal

The Virus.Win32.Expiro.rc is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Virus.Win32.Expiro.rc virus can do?

  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Virus.Win32.Expiro.rc?


File Info:

crc32: E4C65F6C
md5: 29daf27db173997ba5105d7906465c80
name: 29DAF27DB173997BA5105D7906465C80.mlw
sha1: 90c1ea2ea8ea7e6ad83c8d4e781de04c726012f8
sha256: 6c797ab51a32cfb703ac070ad077ebe53ef5f9db27d32e51590dd5b810291e42
sha512: 26882a7640fd02309445d68f613e96f952b0d9a70eac4760958c1c5505a8a85a52ef7a37cce9cb558f33f7a21e051dc2476f5999b8e3ae5952f3b30e368b3c96
ssdeep: 6144:qb/gu2afwm6j17uJbEEZLkdzdfeUIR9mz4IzKlZDKwoZzMc6keKnajNfqJ4:O/wsfmfC9mUIE9KwoZzMc6kAv
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 2016 Citrix Systems, Inc.
InternalName: GoToMeeting
FileVersion: 7.23.0 Build 5573
CompanyName: Citrix Online, a division of Citrix Systems, Inc.
ProductName: GoToMeeting
ProductVersion: 7.23.0 Build 5573
FileDescription: GoToMeeting
OriginalFilename: G2M.exe
Translation: 0x0409 0x04b0

Virus.Win32.Expiro.rc also known as:

BkavW32.Expiro2NHc.PE
K7AntiVirusVirus ( 005057191 )
DrWebWin32.Expiro.127
CynetMalicious (score: 100)
ALYacWin32.Expiro.Gen.4
CylanceUnsafe
ZillyaVirus.Expiro.Win32.148
SangforTrojan.Win32.Generic.2
CrowdStrikewin/malicious_confidence_100% (D)
K7GWVirus ( 005057191 )
Cybereasonmalicious.db1739
CyrenW32/S-85e58284!Eldorado
SymantecW32.Xpiro.I
ESET-NOD32a variant of Win32/Expiro.CG
APEXMalicious
AvastWin32:MalOb-FE [Cryp]
KasperskyVirus.Win32.Expiro.rc
BitDefenderWin32.Expiro.Gen.4
NANO-AntivirusVirus.Win32.Gen.ccmw
MicroWorld-eScanWin32.Expiro.Gen.4
TencentVirus.Win32.Expiro.ae
Ad-AwareWin32.Expiro.Gen.4
SophosMal/Generic-S
ComodoVirus.Win32.Expiro.CG@79ayaa
BitDefenderThetaAI:FileInfector.F2DA25E812
VIPREVirus.Win32.Expiro.dp (v)
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
FireEyeGeneric.mg.29daf27db173997b
EmsisoftWin32.Expiro.Gen.4 (B)
SentinelOneStatic AI – Malicious PE
AviraW32/Infector.Gen8
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataWin32.Expiro.Gen.4
AhnLab-V3Win32/Expiro5.Gen
McAfeeW32/Expiro.gen.rc
MAXmalware (ai score=80)
VBA32BScope.Trojan.Vilsel
MalwarebytesMachineLearning/Anomalous.95%
PandaW32/Expiro.AE
RisingVirus.Expiro!1.A140 (CLASSIC)
IkarusVirus.Win32.Expiro
MaxSecureVirus.W32.Expiro.NS
FortinetW32/Expiro.CG
AVGWin32:MalOb-FE [Cryp]
Paloaltogeneric.ml

How to remove Virus.Win32.Expiro.rc?

Virus.Win32.Expiro.rc removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment