Virus:Win32/Tufik.G (file analysis)

The Virus:Win32/Tufik.G is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Virus:Win32/Tufik.G virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine Virus:Win32/Tufik.G?


File Info:
name: CCEEE53731459CEF5190.mlw
path: /opt/CAPEv2/storage/binaries/51457e488370fb2bc668f077d02664886ca4d7c2846af759136f95d23308994d
crc32: FC3C5CC9
md5: cceee53731459cef519052466af236df
sha1: fda697fe7a35d015405b96c892a475ed99c01ce3
sha256: 51457e488370fb2bc668f077d02664886ca4d7c2846af759136f95d23308994d
sha512: 35876520fd851fc512eda88c5136328ef91e574d1d8efa419653f8a5be0261cba9b88da955ed17203c5431e457d822658780e230c151bb371f2c9bdac04758ae
ssdeep: 1536:7PMZlawTOF6r5DpXDOsnbEKUyjMnLi05N37R3yp59FLLLLppLNZrRSbBdkd8O0Lj:7PMZ0UQyHjjQlAekFi
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C7352442667CA8C7F54C2D7358CC9B6D1EE02C2C153A182AFA53B6E9E53F183E5361E1
sha3_384: a40e8a116a063e5889c0cb169634e182a34dd9ee25b6fa4b644b969aab6616d019279fa458e439b7362648333df9edc3
ep_bytes: 2f6c73617373312e6578650043726561
timestamp: 2008-01-23 14:32:38

Version Info:
0: [No Data]

Virus:Win32/Tufik.G also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
FireEye	Generic.mg.cceee53731459cef
Malwarebytes	Malware.AI.2596086974
Cyren	W32/S-21b63428!Eldorado
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	Mal_TUFIK-1
ClamAV	Win.Downloader.95288-1
Kaspersky	Virus.Win32.Infector.gen
Avast	Win32:Tufik
Baidu	Win32.Trojan-Proxy.Delf.e
TrendMicro	Mal_TUFIK-1
McAfee-GW-Edition	BehavesLike.Win32.Sodinokibi.tz
Sophos	Generic ML PUA (PUA)
Ikarus	Virus.Win32.Tufik.c
Microsoft	Virus:Win32/Tufik.G
Cynet	Malicious (score: 100)
Acronis	suspicious
APEX	Malicious
Rising	Trojan.Generic@ML.98 (RDML:rBpK2DgP8sv4zDrdiGI0Sg)
Yandex	Win32.Perez.B
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Tufik.C!tr
AVG	Win32:Tufik

How to remove Virus:Win32/Tufik.G?

Virus:Win32/Tufik.G removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X