Categories: Virus

What is “Virus.Win32.Floxif.h”?

The Virus.Win32.Floxif.h is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Virus.Win32.Floxif.h virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Expresses interest in specific running processes
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Spanish (Guatemala)
  • Detects the presence of Wine emulator via function name
  • Detects Sandboxie through the presence of a library
  • Detects SunBelt Sandbox through the presence of a library
  • Attempts to remove evidence of file being downloaded from the Internet
  • Tries to unhook or modify Windows functions monitored by Cuckoo
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Network activity contains more than one unique useragent.
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Attempts to modify proxy settings
  • Operates on local firewall’s policies and settings
  • Creates a copy of itself
  • Anomalous binary characteristics

How to determine Virus.Win32.Floxif.h?


File Info:

crc32: 4316A444md5: 7b0e278d5bce2d4b8b35c5ccc5b52a5fname: 7B0E278D5BCE2D4B8B35C5CCC5B52A5F.mlwsha1: 746bb13093e67f64e3564a824262d72db7b9d68fsha256: aa8e063b952ee9cb955e514499e36923fb3929d679c166e15130fc2d828e22f2sha512: 5c0a028e973afcdd0239a1ff2194d54512e77bfadb2394de975aa55452b76ca67248678ebb91be644f2f8556f91ddcf86a5085b7a79b625ba68ded9159d36c35ssdeep: 6144:FBlJyHAOfyWgBF4kYjSjBV+UdvrEFp7hKk:FBQkb4jj+BjvrEH7Xtype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2017, svezabpuekbFileVersion: 6.3.6.8ProductVersion: 6.3.6.8Translation: 0x0809 0x04b0

Virus.Win32.Floxif.h also known as:

Bkav W32.FloxitNV.PE
Elastic malicious (high confidence)
ClamAV Win.Virus.Pioneer-6804573-0
FireEye Generic.mg.7b0e278d5bce2d4b
CAT-QuickHeal W32.Pioneer.CZ1
McAfee Dropper-FIY!7B0E278D5BCE
Cylance Unsafe
VIPRE Virus.Win32.Floxif.a (v)
Sangfor Trojan.Win32.Save.a
K7AntiVirus Virus ( 00521e9a1 )
BitDefender Win32.Floxif.A
K7GW Virus ( 00521e9a1 )
CrowdStrike win/malicious_confidence_100% (W)
Baidu Win32.Virus.Floxif.a
Cyren W32/Floxif.B
Symantec W32.Fixflo.B!inf
TotalDefense Win32/Flofix.D
APEX Malicious
Avast Win32:FloxLib-A [Trj]
Cynet Malicious (score: 100)
Kaspersky Virus.Win32.Pioneer.cz
NANO-Antivirus Virus.Win32.Pioneer.bvrqhu
ViRobot Trojan.Win32.GandCrab.280585.A
MicroWorld-eScan Win32.Floxif.A
Rising Trojan.Fuerboos!8.EFC8 (TFE:dGZlOgWH7wMipE6O6g)
Ad-Aware Win32.Floxif.A
Emsisoft Win32.Floxif.A (B)
Comodo Virus.Win32.Floxif.A@7h5wha
DrWeb Trojan.Encoder.24384
Zillya Virus.Floxif.Win32.1
TrendMicro PE_FLOXIF.D
McAfee-GW-Edition BehavesLike.Win32.Generic.dc
Sophos ML/PE-A + W32/Floxif-C
Ikarus Trojan.Win32.CryptInject
Avira W32/Floxif.hdc
MAX malware (ai score=89)
Microsoft Virus:Win32/Floxif.H
SUPERAntiSpyware Trojan.Agent/Gen-Kryptik
AhnLab-V3 Trojan/Win.MalPe.X2055
GData Win32.Floxif.A
ESET-NOD32 Win32/Floxif.H
Acronis suspicious
BitDefenderTheta AI:FileInfector.207622A70E
ALYac Win32.Floxif.A
VBA32 Virus.Win32.Floxif.h
Malwarebytes Gandcrab.Ransom.Encrypt.DDS
Panda W32/Floxif.A
Zoner Trojan.Win32.81147
TrendMicro-HouseCall PE_FLOXIF.D
Tencent Virus.Win32.Pionner.tt
Yandex Trojan.GenAsa!UyadntvZSLE
SentinelOne Static AI – Malicious PE
MaxSecure Ransomeware.CRAB.gen
Fortinet W32/Floxif.E
AVG Win32:FloxLib-A [Trj]
Cybereason malicious.d5bce2
Paloalto generic.ml
Qihoo-360 Virus.Win32.Pioneer.C

How to remove Virus.Win32.Floxif.h?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Share
Published by
Paul Valéry

Recent Posts

What is “Trojan.Generic.35619263”?

The Trojan.Generic.35619263 is considered dangerous by lots of security experts. When this infection is active,…

34 mins ago

Generic.Dacic.1A7FA519.A.F34D6DE8 removal instruction

The Generic.Dacic.1A7FA519.A.F34D6DE8 is considered dangerous by lots of security experts. When this infection is active,…

40 mins ago

Should I remove “Babar.143901”?

The Babar.143901 is considered dangerous by lots of security experts. When this infection is active,…

46 mins ago

UDS:NetTool.Win64.FRP removal tips

The UDS:NetTool.Win64.FRP is considered dangerous by lots of security experts. When this infection is active,…

51 mins ago

Should I remove “Worm.Win32.Vobfus.ykp”?

The Worm.Win32.Vobfus.ykp is considered dangerous by lots of security experts. When this infection is active,…

54 mins ago

Doina.66979 removal tips

The Doina.66979 is considered dangerous by lots of security experts. When this infection is active,…

55 mins ago