Virus

Should I remove “Virus:Win32/Expiro.M”?

Malware Removal

The Virus:Win32/Expiro.M is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Virus:Win32/Expiro.M virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Virus:Win32/Expiro.M?



File Info:

name: 651E310F8A6B16A954E1.mlw
path: /opt/CAPEv2/storage/binaries/1a72df00b7674bb2a1eabaaff59d76779e0a41be1d19aea43a44ec0d06d50f8e
crc32: 3CAB6424
md5: 651e310f8a6b16a954e198ab68473ebb
sha1: 541da66dfd5221e8ecd9d72c6002b9a8c51bdfa1
sha256: 1a72df00b7674bb2a1eabaaff59d76779e0a41be1d19aea43a44ec0d06d50f8e
sha512: 917bf44d016c855fe7a9f13fae3349f37db82c9f3ae0d97650cd9c8bf04975f34de79c4e7d91aeb5c2204a4def1806ddd651480c83201a03000ba9c75c940cb2
ssdeep: 3072:o8FWMULQsxoD4b1c/wMO3cI9TgZy6GMAUfcZAwxL0lRCfHLSePWZ:9qQsxcCHMO3cIZgoleEpxglRIHGePA
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14FE36C41FC080FA0E3E3623051DEB571D8D97E613EA72D85D39B46A61BD8E84A2D2737
sha3_384: 1a2ff1e83bfb720f180c7fd38da355aa0dfebade3dfb205df878767570d4ffc3aed6b2963f8d198560314000d0cf4ed4
ep_bytes: 60e87170020061e901d6ffff57998a1a
timestamp: 2001-08-17 20:53:09


Version Info:

CompanyName: Microsoft Corporation
FileDescription: msswchx
FileVersion: 5.1.2600.0 (xpclient.010817-1148)
InternalName: msswchx
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: msswch.exe
ProductName: Microsoft® Windows® Operating System
ProductVersion: 5.1.2600.0
Translation: 0x0409 0x04b0

Virus:Win32/Expiro.M also known as:

BkavW32.Expiro_Q.PE
Elasticmalicious (high confidence)
MicroWorld-eScanWin32.Kakavex.Q
ClamAVWin.Trojan.Expiro-9
FireEyeGeneric.mg.651e310f8a6b16a9
CAT-QuickHealW32.Expiro.Gen
SkyhighBehavesLike.Win32.Virut.cc
McAfeeW32/Expiro.c
Cylanceunsafe
ZillyaVirus.Expiro.Win32.5
SangforVirus.Win32.Expiro.wc
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaVirus:Win32/Expiro.039d9260
K7GWTrojan ( 0040f52d1 )
K7AntiVirusVirus ( 0040f52d1 )
BitDefenderThetaAI:FileInfector.94732E1A0F
VirITWin32.Expiro.CB
SymantecW32.Xpiro
ESET-NOD32Win32/Expiro.J
APEXMalicious
CynetMalicious (score: 100)
KasperskyVirus.Win32.Expiro.n
BitDefenderWin32.Kakavex.Q
NANO-AntivirusVirus.Win32.Expiro.btwar
AvastWin32:Expiro [Inf]
TencentVirus.Win32.Expiro.n
SophosW32/Expiro-E
BaiduWin32.Virus.Expiro.b
F-SecureMalware.W32/Kakavex.H
DrWebWin32.Expiro.12
VIPREWin32.Kakavex.Q
TrendMicroPE_EXPIRO.DE
Trapminemalicious.high.ml.score
EmsisoftWin32.Kakavex.Q (B)
SentinelOneStatic AI – Malicious PE
GDataWin32.Kakavex.Q
JiangminWin32/Expiro.c
VaristW32/Expiro.F
AviraW32/Kakavex.H
Antiy-AVLVirus/Win32.Expiro.n
KingsoftWin32.AgVirut.ac.5756
XcitiumVirus.Win32.Expiro.1@u1b4r
ArcabitWin32.Kakavex.Q
ZoneAlarmVirus.Win32.Expiro.n
MicrosoftVirus:Win32/Expiro.M
GoogleDetected
AhnLab-V3Win32/Expiro3.Gen
Acronissuspicious
ALYacWin32.Kakavex.Q
MAXmalware (ai score=100)
VBA32Virus.Expiro.111
MalwarebytesGeneric.Malware.AI.DDS
PandaW32/Expiro.gen
TrendMicro-HouseCallPE_EXPIRO.DE
RisingWin32.Agent.ft (CLASSIC)
YandexWin32.Expiro.Gen
IkarusW32.Kakavex
MaxSecureVirus.Expiro.Gen
FortinetW32/Expiro.NR
AVGWin32:Expiro [Inf]
Cybereasonmalicious.dfd522
DeepInstinctMALICIOUS

How to remove Virus:Win32/Expiro.M?

Virus:Win32/Expiro.M removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment