Virus

Should I remove “Virus:Win32/Luder.B”?

Malware Removal

The Virus:Win32/Luder.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Virus:Win32/Luder.B virus can do?

  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Virus:Win32/Luder.B?


File Info:

name: D7ADF5BA1DFC5F52006D.mlw
path: /opt/CAPEv2/storage/binaries/a5f0bfef57c103537bfab7710edfbe348d4a823cb985f81897f8081237fc4c5c
crc32: F29EB716
md5: d7adf5ba1dfc5f52006d0985b88f308c
sha1: a3f940f43aec43b5cd4e3e82002071bd72d09f09
sha256: a5f0bfef57c103537bfab7710edfbe348d4a823cb985f81897f8081237fc4c5c
sha512: f41d97124686ae92ba30bff8b83b685dfc1080ac14c3ae4247cf80620923cbf87e539f59feb6f745676ca315d08afa54a17aafea5b6c1dfc4f75fb8d23f39cef
ssdeep: 768:57BSvTHHv8NyTJ6KvndZ5D3JQo4y/6R9M2mjJZJKmhW:5tSvTH0GN/hl/6RG3lZJKmhW
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T17C33B40A22EC602BF6F76B31597247105B7BBE56AC34C74E12982A0E4F73A40F974767
sha3_384: 8239b0cf5bb62204ed4330d814b7a0bd63e99603c15e86ab81be3d5b122b5df8b154c2061bfaa2f1e84fe1f73ddd2e04
ep_bytes: 685a7e000133c064ff3064892033c06a
timestamp: 2001-08-17 20:57:17

Version Info:

CompanyName: Microsoft Corporation
FileDescription:
FileVersion: 5.1.2600.0 (xpclient.010817-1148)
InternalName: tnadmin.exe
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: tnadmin.exe
ProductName: Microsoft® Windows® Operating System
ProductVersion: 5.1.2600.0
Translation: 0x0409 0x04b0

Virus:Win32/Luder.B also known as:

DrWebTrojan.Starter.1054
MicroWorld-eScanWin32.Luder.Gen
FireEyeWin32.Luder.Gen
CAT-QuickHealW32.Luder.B
SkyhighW32/WBoy.a.a
McAfeeW32/WBoy.a.a
ZillyaTrojan.Patched.Win32.5448
CrowdStrikewin/malicious_confidence_90% (D)
AlibabaTrojan:Win32/Luder.82777636
K7GWVirus ( 0008d6fb1 )
K7AntiVirusVirus ( 0008d6fb1 )
BitDefenderThetaAI:FileInfector.56732E5F0F
VirITWin32.Patched.C
SymantecW32.Whybo!inf
Elasticmalicious (high confidence)
ESET-NOD32Win32/Patched.A
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Trojan.Luder-10
KasperskyTrojan.Win32.Patched.bj
BitDefenderWin32.Luder.Gen
NANO-AntivirusVirus.Win32.Texel.rdnn
AvastWin32:Luder [Wrm]
TencentVirus.Win32.Patched.abc
TACHYONVirus/W32.Texel
EmsisoftWin32.Luder.Gen (B)
F-SecureTrojan.TR/Luder.Patched.Mod
BaiduWin32.Virus.Launcher.a
VIPREWin32.Luder.Gen
TrendMicroPE_LUDER.CH
SophosTroj/Luder-A
GDataWin32.Virus.Luder.A
JiangminWin32/Luder.a
VaristW32/Heuristic-162!Eldorado
AviraTR/Luder.Patched.Mod
Antiy-AVLVirus/Win32.Texel.k
KingsoftWin32.Luder.f.147
XcitiumVirus.Win32.Luder.A0@stbnd
ArcabitWin32.Luder.Gen
ViRobotWin32.Patched.A
ZoneAlarmTrojan.Win32.Patched.bj
MicrosoftVirus:Win32/Luder.B
GoogleDetected
AhnLab-V3Win32/Luder
VBA32Virus.Win32.Luder.B
ALYacWin32.Luder.Gen
MAXmalware (ai score=100)
Cylanceunsafe
PandaW32/Patchlog.L
TrendMicro-HouseCallPE_LUDER.CH
RisingWin32.Iuhzu.a (CLASSIC)
YandexTrojan.Starter.AH
IkarusTrojan.Win32.Patched
MaxSecureVirus.Patched.BJ
FortinetW32/WBoy.A
AVGWin32:Luder [Wrm]

How to remove Virus:Win32/Luder.B?

Virus:Win32/Luder.B removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment