Categories: Virus

Virus:Win32/Chir!dam removal

The Virus:Win32/Chir!dam is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Virus:Win32/Chir!dam virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family
Anomalous binary characteristics
Yara detections observed in process dumps, payloads or dropped files

How to determine Virus:Win32/Chir!dam?


File Info:
name: D281C010F886E29DCC3A.mlwpath: /opt/CAPEv2/storage/binaries/85f3c8928ecb702f65d6284ad3e797513ce20d0cb4fe78610d76d573adf81472crc32: 66708329md5: d281c010f886e29dcc3ab6ee3d892600sha1: 2f606ec5d49a0f55f6cbb8a30630bf28bc0564b5sha256: 85f3c8928ecb702f65d6284ad3e797513ce20d0cb4fe78610d76d573adf81472sha512: 7cc4dbaafb10a218dc27bbfc6c7d1508e446929fe6c047a27605c0ca533715db588b11fb96fadaea7a3897cfc3a0e0af8ac7c255627d0975edd4ecfc666fc81bssdeep: 3072:zJw8KYg5zA5GsMYSxSJiN/vGss9kTBf9pAXAtPOYQw9T:z035iMhL/vGsbTBl2wOs9type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T13D147B2072C0C073C062147641B5C7F19EBB78755A66AA8BBBCB5FB90F352D2D62938Dsha3_384: fad3a121d8f160ffd13a1b9c15217b1afe8efefc4b37cf4f45ecbd5f44abe3e30f066e6b6bc0e579c9cddce09d4fb6b4ep_bytes: 60e8e6190000101471766c3271762212timestamp: 2009-01-29 11:57:09
Version Info:
0: [No Data]

Virus:Win32/Chir!dam also known as:

Bkav	W32.AIDetectMalware
Lionic	Worm.Win32.Runouce.lk4E
AVG	Win32:Crypt-RPY [Trj]
Elastic	malicious (high confidence)
DrWeb	JS.Nimda
MicroWorld-eScan	Win32.Runouce.S
FireEye	Generic.mg.d281c010f886e29d
CAT-QuickHeal	W32.Runouce.CR1
Skyhigh	BehavesLike.Win32.Kudj.ch
McAfee	W32/Chir.gen@MM!remanants
Malwarebytes	Chir.Spyware.Infostealer.DDS
VIPRE	Win32.Runouce.S
Sangfor	Worm.Win32-Script.Save.Nimda
K7AntiVirus	Virus ( 7000000b1 )
Alibaba	Virus:Win32/Scribble.1f94b4b7
K7GW	Virus ( 7000000b1 )
Cybereason	malicious.0f886e
BitDefenderTheta	Gen:NN.ZexaF.36802.mqW@aCnjgIfi
VirIT	Win32.Runouce.D
Symantec	W32.Chir.B@mm
Cynet	Malicious (score: 99)
APEX	Malicious
ClamAV	Win.Worm.Brontok-88
Kaspersky	HEUR:Virus.Win32.Chir.gen
BitDefender	Win32.Runouce.S
NANO-Antivirus	Virus.Win32.Runouce.bxafx
SUPERAntiSpyware	Worm.Chir
Avast	Win32:Crypt-RPY [Trj]
Tencent	Worm.Win32.Runouce.d
Emsisoft	Win32.Runouce.S (B)
F-Secure	Malware.W32/Chir.B
Baidu	Win32.Trojan.Agent.bf
TrendMicro	PE_Chir.B
Sophos	Mal/Scribble-D
Ikarus	Trojan.SuspectCRC
Jiangmin	Backdoor/Agent.bgb
Google	Detected
Avira	W32/Chir.B
Antiy-AVL	Worm[Email]/Win32.Runouce.b
Kingsoft	Worm.NimdaT.d.18848
Microsoft	Virus:Win32/Chir.gen!dam
Xcitium	EmailWorm.Win32.Runonce.~v001@1qup51
Arcabit	Win32.Runouce.S
ZoneAlarm	HEUR:Virus.Win32.Chir.gen
GData	Win32.Worm.Runouce.A
Varist	W32/Agent.JX.gen!Eldorado
Acronis	suspicious
MAX	malware (ai score=87)
Cylance	unsafe
Panda	W32/Chir.P.worm
TrendMicro-HouseCall	PE_Chir.B
Rising	Trojan.Generic@AI.100 (RDML:vJBJElYaV+HEdls47OSJlQ)
Yandex	JS.Chir.B
SentinelOne	Static AI – Malicious PE
MaxSecure	Virus.W32.Runouce.B
Fortinet	HTML/Iframe.A!exploit
Zoner	Probably Heur.ExeHeaderL
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)
alibabacloud	Virus:Win/Chir.A