What is “W32.Runouce.CR1”?

The W32.Runouce.CR1 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What W32.Runouce.CR1 virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Anomalous binary characteristics

How to determine W32.Runouce.CR1?


File Info:
name: 90388A641536B1290352.mlw
path: /opt/CAPEv2/storage/binaries/22f58d427b76f32c7d9f21be8f27a9707fd33c5020a9b7c7e795cae1c6940dff
crc32: 4DA8785C
md5: 90388a641536b1290352cd69a300b31a
sha1: 06c1609cc5edb53731f0f5c8b0a0cb18445b0d3a
sha256: 22f58d427b76f32c7d9f21be8f27a9707fd33c5020a9b7c7e795cae1c6940dff
sha512: ee9a4efc3ef85bae3e2c74e1c3ef5be9df18dcc14043544beb64f20dc0473b293197419ecb19f9fc95b8c162cd3d240b65a447960d021db89629685b1f938e9d
ssdeep: 12288:KD7G6Ye9vayMJfgpAp9S9krCxmQEfXh0Ngoxn0h+BgC:G7GG9vayWOg9S7bNgn+Bg
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B0155A11E553882BF671413269BE667B551CBE31C7046887F3C8BE3E31F66E27A2160B
sha3_384: e12014d9c9cd143b839d4c60273d1380889878321cca210f1f1b9b643c06fd8da34431a52126ba939202954138274bf7
ep_bytes: 558bec6aff687037490068de3f480064
timestamp: 2011-09-27 01:48:09

Version Info:
0: [No Data]

W32.Runouce.CR1 also known as:

Elastic	malicious (high confidence)
FireEye	Generic.mg.90388a641536b129
CAT-QuickHeal	W32.Runouce.CR1
Cylance	Unsafe
Sangfor	[ARMADILLO V1.71]
K7AntiVirus	Trojan ( 0008d46e1 )
K7GW	Trojan ( 0008d46e1 )
Cybereason	malicious.cc5edb
Baidu	Win32.Trojan.Agent.bf
VirIT	Win32.Chir.B
Cyren	W32/Agent.JX.gen!Eldorado
ESET-NOD32	a variant of Win32/Chir.C
APEX	Malicious
ClamAV	Win.Worm.Brontok-88
Kaspersky	UDS:DangerousObject.Multi.Generic
Comodo	Virus.Win32.Virut.Ce@1fy3nv
DrWeb	JS.Nimda
McAfee-GW-Edition	BehavesLike.Win32.BadFile.ch
Ikarus	Virus.Win32.Virut
Jiangmin	Heur:Trojan/VB
Webroot	W32.Malware.Gen
Avira	W32/Chir.B
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
McAfee	Artemis!90388A641536
VBA32	BScope.Trojan.Fuery
Malwarebytes	Chir.Virus.FileInfector.DDS
Yandex	Win32.Virut.Y.Gen
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Chir.C!tr
BitDefenderTheta	Gen:NN.ZexaF.34742.3yW@am@4iKkb
AVG	Win32:Agent-BARL [Trj]
Avast	Win32:Agent-BARL [Trj]
CrowdStrike	win/malicious_confidence_90% (W)

How to remove W32.Runouce.CR1?

W32.Runouce.CR1 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X