Virus

How to remove “Virus:Win32/Virut.AR”?

Malware Removal

The Virus:Win32/Virut.AR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Virus:Win32/Virut.AR virus can do?

  • Authenticode signature is invalid
  • Binary compilation timestomping detected

How to determine Virus:Win32/Virut.AR?



File Info:

name: B7921BD036350D72BAA6.mlw
path: /opt/CAPEv2/storage/binaries/f34cb3f1cf98fabb325d20d8cc0eba195ad3d3ba9375a320de1821b19e4fd2f9
crc32: 7771150C
md5: b7921bd036350d72baa6c12c5a8c8390
sha1: f870e4b9442e7dbebc3ccb9ca708faeff962fd44
sha256: f34cb3f1cf98fabb325d20d8cc0eba195ad3d3ba9375a320de1821b19e4fd2f9
sha512: ff7842297f56f53da2b899a2bf6732dd1d5ee5522275fda774e07ba23471d0777e4bf552d0f28891ebdf39be237cf565988fcb9a4ba3b9d8b0fd5211f67b67f5
ssdeep: 1536:FZJRV6Cc49R/dT12MMMMM2MMMMMZ1dUklQc:HHV6Cc49R/dMMMMMM2MMMMMZ1Wv
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18D632861A304568EE6BF0970956668A108353C668832DBF767D27D4F2F33B82DB2471F
sha3_384: 5dcac581ece626243e8149078ad97287f08207acf718c14674d6c17a01c8b04c668fac93e3f1ee0e602b43f36cbee10b
ep_bytes: e80a000000e95dffffffcccccccccc8b
timestamp: 2055-05-25 18:10:40


Version Info:

CompanyName: Microsoft Corporation
FileDescription: Outlook Express
FileVersion: 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
InternalName: MSIMN
LegalCopyright: © 2004 Microsoft Corporation. All rights reserved.
OriginalFilename: MSIMN.EXE
ProductName: Microsoft® Windows® Operating System
ProductVersion: 6.00.2900.2180
Translation: 0x0409 0x04b0

Virus:Win32/Virut.AR also known as:

BkavW32.Vetor.PE
LionicVirus.Win32.Virut.lMRs
Elasticmalicious (high confidence)
MicroWorld-eScanWin32.Virtob.3.Gen
FireEyeGeneric.mg.b7921bd036350d72
CAT-QuickHealW32.Virut.D
SkyhighBehavesLike.Win32.Virut.lh
MalwarebytesGeneric.Malware/Suspicious
ZillyaTrojan.CPEX.Win32.14037
SangforSuspicious.Win32.Save.a
K7AntiVirusVirus ( 00001b761 )
AlibabaVirus:Win32/Virut.beefd111
K7GWVirus ( 00001b761 )
Cybereasonmalicious.036350
ArcabitWin32.Virtob.3.Gen
BaiduWin32.Virus.Virut.j
VirITWin32.Scribble.Y
SymantecW32.Virut.U
ESET-NOD32Win32/Virut.Q
APEXMalicious
TrendMicro-HouseCallPE_VIRUT.XP-3
ClamAVWin.Trojan.Virut-35
KasperskyVirus.Win32.Virut.q
BitDefenderWin32.Virtob.3.Gen
NANO-AntivirusVirus.Win32.Virut.jxol
AvastWin32:Virut [Inf]
TencentVirus.Win32.HanKu.b
EmsisoftWin32.Virtob.3.Gen (B)
F-SecureMalware.W32/Virut.X
DrWebWin32.Virut.5
VIPREWin32.Virtob.3.Gen
TrendMicroPE_VIRUT.XP-3
Trapminemalicious.high.ml.score
SophosW32/Vetor-A
IkarusVirus.Win32.Virut
JiangminWin32/Virut.f
GoogleDetected
AviraW32/Virut.X
VaristW32/Virut.D.gen!Eldorado
Antiy-AVLVirus/Win32.Virut.q
KingsoftWin32.Virut.ce.57344
XcitiumVirus.Win32.Virut.q@1fhkey
MicrosoftVirus:Win32/Virut.AR
ViRobotWin32.Virut.Gen.B
ZoneAlarmVirus.Win32.Virut.q
GDataWin32.Virtob.3.Gen
CynetMalicious (score: 100)
AhnLab-V3Win32/Virut.C
McAfeeW32/Virut.j.gen
MAXmalware (ai score=100)
VBA32Virus.Virut.07
Cylanceunsafe
PandaW32/Virutas.gen
RisingVirus.Virut!1.A08C (CLASSIC)
YandexWin32.Virut.Gen.5
SentinelOneStatic AI – Malicious PE
MaxSecureVirus.Virut.Gen
FortinetW32/Virut.G
BitDefenderThetaAI:FileInfector.D6DFFBB612
AVGWin32:Virut [Inf]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)
alibabacloudVirus:Win/Virut.Q

How to remove Virus:Win32/Virut.AR?

Virus:Win32/Virut.AR removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment