Categories: Virus

Virus:Win32/Xpaj.B removal tips

The Virus:Win32/Xpaj.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Virus:Win32/Xpaj.B virus can do?

Behavioural detection: Executable code extraction – unpacking
CAPE extracted potentially suspicious content
Unconventionial language used in binary resources: Spanish (Mexican)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family
Yara detections observed in process dumps, payloads or dropped files

How to determine Virus:Win32/Xpaj.B?


File Info:
name: 4CDB155CD45EAB256310.mlwpath: /opt/CAPEv2/storage/binaries/1421353610db99ac0cac1b214f924b58ed9f52422d65a9a3f3225aeb5b175edbcrc32: 22BEEC8Cmd5: 4cdb155cd45eab256310fbfd60c86186sha1: 33f8530f46df2034c938ec69d0337c8d4ae58c46sha256: 1421353610db99ac0cac1b214f924b58ed9f52422d65a9a3f3225aeb5b175edbsha512: 84a5519f63b89442e05fdb67c5d11b6cd07b55dfaa18378d310c286dd9be012ed8c1cee23cfa1a08c507ccf64fccc7aa6ab2e25883df78406d275171d1144142ssdeep: 3072:49vCmoHKyjo/ZHvcGQaP7yl7xhIFNHdZUhLUoLW5:4pwL1aP87x6Ptype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windowstlsh: T14304AE1575FA42A6F6F65F31AAF58A050A3B7D52FEB4C00E5B05344E3931A90DE32723sha3_384: 908e87711fce8260f50cbbf83db20b7c3d337dcde068deeddb1fca9dcc37ed897aaf4c513a16a75d1ef49ac98b6bc9d0ep_bytes: 558bec538b5d08568b750c578b7d1085timestamp: 2008-12-10 04:44:11
Version Info:
CompanyName: Sonic Focus, Inc.FileDescription: SFFXCPStr.DLLFileVersion: 1.0.1.42InternalName: SFFXCPStr.DLLLegalCopyright: (c) 2006-2008 Sonic Focus, Inc.OriginalFilename: SFFXCPStr.DLLProductName: Sonic Focus EffectsProductVersion: 1.0.0.42Translation: 0x0409 0x04e4

Virus:Win32/Xpaj.B also known as:

Lionic	Virus.Win32.Xpaj.lEep
Elastic	malicious (high confidence)
DrWeb	Win32.Xpaj.1
MicroWorld-eScan	Win32.XPaj.D.3
ClamAV	BC.Win.Trojan.Xpaj-7
FireEye	Generic.mg.4cdb155cd45eab25
CAT-QuickHeal	W32.Xpaj.D
Skyhigh	W32/Xpaj.c
McAfee	W32/Xpaj.c
Cylance	unsafe
VIPRE	Win32.XPaj.D.3
Sangfor	Virus.Win32.Xpaj.atfz
CrowdStrike	win/malicious_confidence_90% (W)
BitDefender	Win32.XPaj.D.3
K7GW	Virus ( 700000051 )
K7AntiVirus	Virus ( 700000051 )
BitDefenderTheta	AI:FileInfector.85AF89100E
Symantec	W32.Xpaj.B
ESET-NOD32	Win32/Goblin.E.Gen
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Virus.Win32.Xpaj.genc
Alibaba	Virus:Win32/Goblin.e42be025
NANO-Antivirus	Virus.Win32.Xpaj.blcbg
Rising	Virus.Xpaj!8.3D0 (CLOUD)
Sophos	Mal/Xpaj-B
F-Secure	Malware.W32/Xpaj.D
Baidu	Win32.Virus.Xpaj.a
TrendMicro	PE_XPAJ.C
Emsisoft	Win32.XPaj.D.3 (B)
Ikarus	Virus.Xpaj
GData	Win32.XPaj.D.3
Jiangmin	Win32/Xpaj.Gen
Webroot	W32.Xpaj.Genc
Google	Detected
Avira	W32/Xpaj.D
Antiy-AVL	Virus/Win32.Xpaj.genc
Kingsoft	Win32.Infected.AutoInfector.a
Xcitium	Malware@#2idceuzbuqng6
Arcabit	Win32.XPaj.D.3
ZoneAlarm	Virus.Win32.Xpaj.genc
Microsoft	Virus:Win32/Xpaj.B
Varist	W32/Xpaj.C
VBA32	Virus.Xpaj.17905
ALYac	Win32.XPaj.D.3
MAX	malware (ai score=100)
DeepInstinct	MALICIOUS
Panda	W32/Xpaj.b
TrendMicro-HouseCall	PE_XPAJ.C
Tencent	Virus.Win32.Xpaj.tt
Yandex	Win32.Xpaj.Gen
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Xpaj.C
AVG	Win32:Xpaj
Avast	Win32:Xpaj