Categories: Virus

Should I remove “Virus:Win32/Viking.JW”?

The Virus:Win32/Viking.JW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Virus:Win32/Viking.JW virus can do?

Creates RWX memory
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Reads data out of its own binary image
Drops a binary and executes it
Unconventionial language used in binary resources: Chinese (Simplified)
Checks for the presence of known windows from debuggers and forensic tools
Installs itself for autorun at Windows startup
Creates a hidden or system file
Anomalous binary characteristics

How to determine Virus:Win32/Viking.JW?


File Info:
crc32: 50E8C536md5: 8654b6216f0c332392801cf7fabd421cname: 8654B6216F0C332392801CF7FABD421C.mlwsha1: 60b0dc773a103c2d232f30b8e5e07791df2491cfsha256: ee0160b189e1717afee2a2aeccef34d5b65791da8644708bb9f68287733680acsha512: 319f41f46becd273b031caa3c063941c75073a161fad26dfcdaa54d70aa13c2bff84b9cac2b688f3dc7b3864ed9ae4db8fe7f2c761ac27d44739a5f5d4793a62ssdeep: 6144:OajdMJyFRe6azHqTGAtsnZcDE/JwCLpzrHt5:j2JylsKTzsB2CtzrN5type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Virus:Win32/Viking.JW also known as:

Bkav	W32.HLLPSyPonA.PE
K7AntiVirus	Trojan ( 004ef94b1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Legmir.184
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.LmirPMF.S19289225
ALYac	Dropped:Generic.Delf.Lmir.8D883317
Cylance	Unsafe
Zillya	Virus.Sypon.Win32.1
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
K7GW	Trojan ( 004ef94b1 )
Cybereason	malicious.16f0c3
Cyren	W32/Philis.WVHB-2516
Symantec	W32.HLLP.Philis
ESET-NOD32	Win32/HLLP.Philis.A
APEX	Malicious
Avast	Win32:Delf-AFC [Trj]
ClamAV	Win.Trojan.Lmir-22
Kaspersky	Trojan-GameThief.Win32.Lmir.gen
BitDefender	Dropped:Generic.Delf.Lmir.8D883317
NANO-Antivirus	Virus.Win32.HLLP.ghnp
MicroWorld-eScan	Dropped:Generic.Delf.Lmir.8D883317
Tencent	Virus.Win32.Lamer.gg
Ad-Aware	Dropped:Generic.Delf.Lmir.8D883317
Sophos	ML/PE-A + W32/LegMir-P
Comodo	Win32.HLLP.Philis.A@3xq6
BitDefenderTheta	AI:Packer.E828F7511D
VIPRE	BehavesLike.Win32.Malware.wsc (mx-v)
TrendMicro	PE_PHILIS.A-0
McAfee-GW-Edition	BehavesLike.Win32.RansomCWall.dh
FireEye	Generic.mg.8654b6216f0c3323
Emsisoft	Dropped:Generic.Delf.Lmir.8D883317 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/PSW.LMirInfect.13.b
Avira	W32/HLLW.Sypon
eGambit	Unsafe.AI_Score_98%
Microsoft	Virus:Win32/Viking.JW
Arcabit	Generic.Delf.Lmir.8D883317
ZoneAlarm	Trojan-GameThief.Win32.Lmir.gen
GData	Win32.Trojan.PSE.136NMWS
TACHYON	Virus/W32.Philis
McAfee	W32/HLLP.Philis.b
MAX	malware (ai score=87)
VBA32	Virus.Win32.HLLP.Sypon.a
Malwarebytes	Malware.AI.3850588888
Panda	W32/Legmir.B
TrendMicro-HouseCall	PE_PHILIS.A-0
Rising	Trojan.Banker!1.A377 (RDMK:cmRtazol+owlJ8dTe3EOWPE3J6VO)
Yandex	Trojan.GenAsa!Hw2KEm396Dk
Ikarus	Virus.Win32.Viking
MaxSecure	Virus.W32.HLLP.Sypon.A
Fortinet	W32/Legendmir.NMD!tr
AVG	Win32:Delf-AFC [Trj]
Qihoo-360	QVM41.1.Malware.Gen