Categories: Virus

Virus:Win32/Virut.AX removal instruction

The Virus:Win32/Virut.AX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Virus:Win32/Virut.AX virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Virus:Win32/Virut.AX?


File Info:

crc32: 95594176md5: 5a4ebc1f3dcf796d92215a8e8c9e637ename: 5A4EBC1F3DCF796D92215A8E8C9E637E.mlwsha1: b2860b0d2eba2666637600b27a9fe5bc01377953sha256: eaa6702556e7161c47f9a1a4ef8a1c32445c6a63010d34fc2be2351798a2ea10sha512: a1ae0b858f63397e8b1beb34fc1a5be278f9919aa28977a7664c9613687b08c372dc97e046132fe25bbae09e7c29987246e99ce64e4eaf93c52549b17bd5b35dssdeep: 768:9MezO5NscXKBH1J1du8F68XhZq6J8UXuKS0pVi5nC6mzGBuznRdZgikJm44n:9cI1Ju8FlhZq6J86uK9pVq4TWikgntype: PE32 executable (GUI) Intel 80386, for MS Windows, PECompact2 compressed

Version Info:

0: [No Data]

Virus:Win32/Virut.AX also known as:

Bkav W32.FakeFolderC.Worm
K7AntiVirus EmailWorm ( 0040f8c11 )
TotalDefense Win32/Lightmoon.C
MicroWorld-eScan Worm.Generic.586028
CMC Generic.Win32.5a4ebc1f3d!CMCRadar
CAT-QuickHeal W32.Virut.D
ALYac Worm.Generic.586028
Cylance Unsafe
Zillya Worm.VB.Win32.9888
CrowdStrike malicious_confidence_100% (W)
K7GW EmailWorm ( 0040f8c11 )
Cybereason malicious.f3dcf7
TrendMicro WORM_MOONLIGHT.E
Baidu Win32.Worm.VB.a
NANO-Antivirus Virus.Win32.Virut.jxol
Cyren W32/Worm.ACNM-3538
Symantec W32.Rontokbro@mm
ESET-NOD32 Win32/NoonLight.M
TheHacker Trojan/NoonLight.m
Avast Win32:Cheburgen-D
ClamAV Win.Worm.Moonlight-2
GData Worm.Generic.586028
Kaspersky Virus.Win32.Virut.q
BitDefender Worm.Generic.586028
ViRobot I-Worm.Win32.VB.37888
Tencent Win32.Virus.Virut.Swbm
Ad-Aware Worm.Generic.586028
Sophos Mal/VB-F
F-Secure Worm.Generic.586028
DrWeb Win32.HLLW.Generic.207
VIPRE Trojan.Win32.Generic!BT
Invincea heuristic
McAfee-GW-Edition BehavesLike.Win32.MoonLight.qc
Emsisoft Worm.Generic.586028 (B)
SentinelOne static engine – malicious
F-Prot W32/EmailWorm.RA
Endgame malicious (high confidence)
Webroot W32.Malware.Gen
Avira W32/Virut.U
Antiy-AVL Virus/Win32.Virut.n
Microsoft Virus:Win32/Virut.AX
Jiangmin Win32/Virut.Gen
AegisLab W32.Virut.q!c
ZoneAlarm Virus.Win32.Virut.q
AhnLab-V3 HEUR/Fakon.mwf
McAfee W32/MoonLight.worm
AVware Trojan.Win32.Generic!BT
MAX malware (ai score=86)
VBA32 Trojan.VB.gen
Malwarebytes Worm.Moonlight
Panda W32/Moonlight.F.worm
TrendMicro-HouseCall WORM_MOONLIGHT.E
Rising Worm.Mail.VB.du (CLOUD)
Yandex I-Worm.VB!cBVXNddvzmA
Ikarus Email-Worm.Win32.VB
Fortinet W32/Virut.fam
AVG Win32:Cheburgen-D
Paloalto generic.ml
Qihoo-360 Win32/Virus.dac

How to remove Virus:Win32/Virut.AX?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Share
Published by
Paul Valéry

Recent Posts

What is “MSIL/TrojanDropper.Agent.BVT”?

The MSIL/TrojanDropper.Agent.BVT is considered dangerous by lots of security experts. When this infection is active,…

15 hours ago

Should I remove “Generic.Dacic.94CCEEA9.A.A4A6DA47”?

The Generic.Dacic.94CCEEA9.A.A4A6DA47 is considered dangerous by lots of security experts. When this infection is active,…

15 hours ago

Malware.AI.524217860 removal tips

The Malware.AI.524217860 is considered dangerous by lots of security experts. When this infection is active,…

16 hours ago

Trojan:Win32/Koutodoor.F removal tips

The Trojan:Win32/Koutodoor.F is considered dangerous by lots of security experts. When this infection is active,…

17 hours ago

How to remove “Malware.AI.1412460714”?

The Malware.AI.1412460714 is considered dangerous by lots of security experts. When this infection is active,…

17 hours ago

Generic.Dacic.8952383F.A.5EC8C34B removal instruction

The Generic.Dacic.8952383F.A.5EC8C34B is considered dangerous by lots of security experts. When this infection is active,…

17 hours ago