Virus

What is “Virus:Win32/Expiro.CCCF!MTB”?

Malware Removal

The Virus:Win32/Expiro.CCCF!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Virus:Win32/Expiro.CCCF!MTB virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Authenticode signature is invalid

How to determine Virus:Win32/Expiro.CCCF!MTB?



File Info:

name: 2F33FB95AA3AB3695A8C.mlw
path: /opt/CAPEv2/storage/binaries/d80fb2ff7108c5f9dfd78c716ea92805fc2392c639ca3e2f7e5c03a1aed30cec
crc32: 19E160AE
md5: 2f33fb95aa3ab3695a8c2b56831a9bd8
sha1: e5b6790ae9a219d2d11037c8308e7f200d33d765
sha256: d80fb2ff7108c5f9dfd78c716ea92805fc2392c639ca3e2f7e5c03a1aed30cec
sha512: 1850d10f6cd2f32973685e81acf98856a81d3fd6928218b93afa8bdd052bd7421997f096f705af654bd22fdd637d6d9ee67b7a7b8362c60de7ce0d77d7504600
ssdeep: 98304:EgsU8eI0fWNWTsgau4aeJCY67bsdEFyJmlDgVV:EII0fcwau4JJCY3mIJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T152067D22FC018975D46532F0542DB6B5C9149D3607221EE371BC3A5E6B781C3EE3BAAE
sha3_384: 52448621cba0b07f4066866e410844f789eb5d96796a291432b066f273c83ed015b6da8ab6021b67b034f8483cfb4f92
ep_bytes: 535751bb18000000648b3b03db01fb8b
timestamp: 2022-07-28 02:53:33


Version Info:

CompanyName: Mojang
FileDescription: Minecraft Launcher
FileVersion: 1.0.1.0
InternalName: MinecraftLauncher
LegalCopyright: Copyright (C) 2016 Mojang
OriginalFilename: MinecraftLauncher.exe
ProductName: Minecraft
ProductVersion: 1.0.1.0
Translation: 0x0409 0x04b0

Virus:Win32/Expiro.CCCF!MTB also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanWin32.Expiro.Gen.6
SkyhighBehavesLike.Win32.BadFile.wh
McAfeeArtemis!2F33FB95AA3A
VIPREWin32.Expiro.Gen.6
CrowdStrikewin/malicious_confidence_90% (D)
BitDefenderWin32.Expiro.Gen.6
VirITWin32.Expiro.CW
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Expiro.CP
CynetMalicious (score: 100)
APEXMalicious
KasperskyVirus.Win32.Expiro.ns
NANO-AntivirusVirus.Win32.Gen.ccmw
RisingTrojan.Generic@AI.100 (RDML:gCCBTjf/9ZeQslzTozXwug)
SophosMal/EncPk-MK
F-SecureMalware.W32/Infector.Gen8
Trapminemalicious.moderate.ml.score
FireEyeGeneric.mg.2f33fb95aa3ab369
EmsisoftWin32.Expiro.Gen.6 (B)
IkarusVirus.Win32.Expiro
JiangminTrojan.Bingoml.esh
VaristW32/Expiro.AX.gen!Eldorado
AviraW32/Infector.Gen8
Antiy-AVLVirus/Win64.Expiro.cp
MicrosoftVirus:Win32/Expiro.CCCF!MTB
ArcabitWin32.Expiro.Gen.6
ZoneAlarmVirus.Win32.Expiro.ns
GDataWin32.Expiro.Gen.6
GoogleDetected
BitDefenderThetaGen:NN.ZexaF.36792.Ix0@aquQlRaO
ALYacWin32.Expiro.Gen.6
MAXmalware (ai score=81)
VBA32BScope.Trojan.Wacatac
Cylanceunsafe
PandaW32/Expiro.AK
SentinelOneStatic AI – Suspicious PE
FortinetW32/Expiro.CP
AVGWin32:Xpirat-C [Inf]
AvastWin32:Xpirat-C [Inf]

How to remove Virus:Win32/Expiro.CCCF!MTB?

Virus:Win32/Expiro.CCCF!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment