Virus

Virus:Win32/Luder.B removal guide

Malware Removal

The Virus:Win32/Luder.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Virus:Win32/Luder.B virus can do?

  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Virus:Win32/Luder.B?


File Info:

name: 54D4DAAED205FCA95642.mlw
path: /opt/CAPEv2/storage/binaries/bba349f31f23413d230e0e8a9c14caae338cc42641a1dc933339bcdd0e0800b0
crc32: 044117CC
md5: 54d4daaed205fca95642f75a172b2100
sha1: 3152e8193b1532b44becaa4025d65ae0850cf9b4
sha256: bba349f31f23413d230e0e8a9c14caae338cc42641a1dc933339bcdd0e0800b0
sha512: c68d4e661f80b06b826a58fc784882ce5145aae36dc8d6e7904e7df0aeaed62f229cb1107f2b566add808f65412e1d57f5b0a7fb3ea57d493a0576ebdaac20ef
ssdeep: 1536:Wj0DE1MaKEar0b8ZgJOSBOkblfdlyRyZaVOwCBNEXW:Wj7MStwZgJOSBOkblfqR+qZCBNoW
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T19C63D30033F8806DE1B22E3059B957A517BBBC619C79878E538C5E1D2FB7991CA34B23
sha3_384: 637eed7bc81f2fc54088d1a9546acef979e44d3e30cf75752013817aabf789b54cad18aa83da973ac713f3ba4ebc04cc
ep_bytes: 68c8e8000133d264ff3264892233c06a
timestamp: 2001-08-17 20:54:07

Version Info:

CompanyName: Microsoft Corporation
FileDescription: Kill Process
FileVersion: 5.1.2600.0 (XPClient.010817-1148)
InternalName: TaskKill.exe
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: TaskKill.exe
ProductName: Microsoft® Windows® Operating System
ProductVersion: 5.1.2600.0
Translation: 0x0409 0x04b0

Virus:Win32/Luder.B also known as:

LionicVirus.Win32.Texel.kYKY
Elasticmalicious (high confidence)
MicroWorld-eScanWin32.Luder.Gen
FireEyeWin32.Luder.Gen
CAT-QuickHealW32.Luder.B
SkyhighW32/WBoy.a.a
McAfeeW32/WBoy.a.a
ZillyaVirus.Texel.Win32.6
K7AntiVirusVirus ( 0008d6fb1 )
AlibabaVirus:Win32/Luder.7e0633fd
K7GWVirus ( 0008d6fb1 )
CrowdStrikewin/malicious_confidence_100% (D)
BaiduWin32.Virus.Launcher.a
SymantecW32.Whybo!inf
ESET-NOD32Win32/Luder.Gen
CynetMalicious (score: 99)
KasperskyVirus.Win32.Texel.k
BitDefenderWin32.Luder.Gen
NANO-AntivirusVirus.Win32.Texel.rdnn
ViRobotWin32.Patched.A
AvastWin32:Luder [Wrm]
TencentVirus.Win32.Loader.td
TACHYONVirus/W32.Texel
EmsisoftWin32.Luder.Gen (B)
F-SecureMalware.W32/Texel.M
DrWebTrojan.Starter.171
VIPREWin32.Luder.Gen
TrendMicroPE_LUDER.CH
SophosTroj/Luder-A
GDataWin32.Virus.Luder.A
JiangminWin32/Luder.a
WebrootW32.Luder.Gen
VaristW32/Heuristic-162!Eldorado
AviraW32/Texel.M
Antiy-AVLVirus/Win32.Texel.k
KingsoftWin32.Luder.f.147
XcitiumVirus.Win32.Texel.A@11xi56
ArcabitWin32.Luder.Gen
ZoneAlarmVirus.Win32.Texel.k
MicrosoftVirus:Win32/Luder.B
GoogleDetected
AhnLab-V3Win32/Luder
BitDefenderThetaAI:FileInfector.56732E5F0F
ALYacWin32.Luder.Gen
MAXmalware (ai score=100)
VBA32Virus.Win32.Luder.B
Cylanceunsafe
PandaW32/Patchlog.L
TrendMicro-HouseCallPE_LUDER.CH
RisingWin32.KLdown.b (CLASSIC)
YandexTrojan.Starter.AH
IkarusTrojan.Win32.Patched
FortinetW32/WBoy.A
AVGWin32:Luder [Wrm]
DeepInstinctMALICIOUS

How to remove Virus:Win32/Luder.B?

Virus:Win32/Luder.B removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment