Virus

How to remove “Virus:Win32/Xpaj!C”?

Malware Removal

The Virus:Win32/Xpaj!C is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Virus:Win32/Xpaj!C virus can do?

  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Virus:Win32/Xpaj!C?


File Info:

name: CF942CE01AD86EAA0692.mlw
path: /opt/CAPEv2/storage/binaries/6a0d7bd32c687f9cfab5fc112401e0e88f058e83b31ff5cd8a5a4aa7d59f770d
crc32: 2F02F436
md5: cf942ce01ad86eaa0692f2e0f63c3592
sha1: 7f7cc63b5f56489d4b8045f27295d37380436db8
sha256: 6a0d7bd32c687f9cfab5fc112401e0e88f058e83b31ff5cd8a5a4aa7d59f770d
sha512: 3f5c7a8cf8875404b7e20f57efc9fb5848283304d4606b00a888f19043c2ffaf64287db4ceb4e52cddb21d2e152aee159143cc56d5548b00a5a52dc34d49802d
ssdeep: 6144:/aJet0QUn6cawVKu/sMwUvPJZSrLYmmhk6Rgc90w:ket0QUn6cawVKutZZOLNmhkbcB
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1CC44E06376C0C87AD3A275744D929BD8D2F7F4A08EE42A0377964BEF0E7694D401A31B
sha3_384: 037f8b95159d1d814f16ddc01910371b983e195289898fb2b32cbf48e8f129adf3579faead7669cdc5cc184af9a5f766
ep_bytes: 6a0c6800ef486de8f9fcffff33c04089
timestamp: 2009-07-31 23:23:01

Version Info:

CompanyName: Sun Microsystems, Inc.
FileDescription: Java(TM) Plug-in COM Library
FileVersion: 6.0.160.1
Full Version: 1.6.0_16-b01
InternalName: Java(TM) Plug-in COM Library
LegalCopyright: Copyright © 2004
OriginalFilename: jpicom.dll
ProductName: Java(TM) Platform SE 6 U16
ProductVersion: 6.0.160.1
OLESelfRegister:
Translation: 0x0409 0x04b0

Virus:Win32/Xpaj!C also known as:

BkavW32.XpajA.PE
LionicVirus.Win32.Generic.n!c
Elasticmalicious (high confidence)
DrWebWin32.Xpaj.1
MicroWorld-eScanWin32.XPaj.D.1
FireEyeGeneric.mg.cf942ce01ad86eaa
CAT-QuickHealW32.Xpaj.C
SkyhighBehavesLike.Win32.Trojan.dc
McAfeeW32/Xpaj.b
Cylanceunsafe
K7AntiVirusVirus ( 700000051 )
AlibabaVirus:Win32/Goblin.3c9b4fcc
K7GWVirus ( 700000051 )
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderThetaAI:FileInfector.6BA1E83C0E
SymantecW32.Xpaj.B
ESET-NOD32Win32/Goblin.D.Gen
APEXMalicious
ClamAVBC.Win.Trojan.Xpaj-7
KasperskyVirus.Win32.Xpaj.gen
BitDefenderWin32.XPaj.D.1
NANO-AntivirusVirus.Win32.Xpaj.blcbg
AvastWin32:Goblinek [Inf]
TencentVirus.Win32.Xpaj.tt
SophosMal/Xpaj-B
GoogleDetected
F-SecureMalware.W32/Xpaj.C
BaiduWin32.Virus.Xpaj.a
VIPREWin32.XPaj.D.1
TrendMicroPE_XPAJ.A
EmsisoftWin32.XPaj.D.1 (B)
SentinelOneStatic AI – Suspicious PE
GDataWin32.XPaj.D.1
JiangminWin32/Xpaj.Gen
VaristW32/Xpaj.C
AviraW32/Xpaj.C
MAXmalware (ai score=99)
Antiy-AVLVirus/Win32.Xpaj.gen
KingsoftWin32.Infected.AutoInfector.a
XcitiumMalware@#13tthywqe54zk
ArcabitWin32.XPaj.D.1
ZoneAlarmVirus.Win32.Xpaj.gen
MicrosoftVirus:Win32/Xpaj.gen!C
CynetMalicious (score: 100)
ALYacWin32.XPaj.D.1
VBA32BScope.Virus.Xpaj.gen
PandaW32/Xpaj.b
TrendMicro-HouseCallPE_XPAJ.A
RisingVirus.Xpaj!8.3D0 (CLOUD)
YandexWin32.Xpaj.Gen
IkarusTrojan.SuspectCRC
MaxSecureVirus.Xpaj.Gen
FortinetW32/Xpaj.fam
AVGWin32:Goblinek [Inf]
DeepInstinctMALICIOUS

How to remove Virus:Win32/Xpaj!C?

Virus:Win32/Xpaj!C removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment