Malware

Should I remove “W32.Virut.D”?

Malware Removal

The W32.Virut.D is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What W32.Virut.D virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine W32.Virut.D?


File Info:

crc32: 2D35DFC4
md5: 1d357619ede963fcc7eaf9da64d4cd94
name: 1D357619EDE963FCC7EAF9DA64D4CD94.mlw
sha1: 6f5bcb2afef0e7ba227334de651819defbe6147c
sha256: bd787b12f4c0d3300220944e6937a36fa845856436aaca88c6c08f9f5212b196
sha512: c755d5858a5c2a4fdaf94d532dfc877b5f6b155561ea65ab072710030e52900bdba8dddc8475678de9f17f15965996fd696c0dbbfdbf92f87f1d87045d7766df
ssdeep: 768:X8QPPmpEUy8sMg537UYNUGYoestRf3sWLvwsL+gwlDLp3HdB4QId3Z:X8evMg537UYeoFtRfcyIsL+fVL1dSh
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 2003
InternalName: KillReg
FileVersion: 1, 0, 0, 3
CompanyName: Standard Microsystems Corp.
PrivateBuild:
LegalTrademarks:
Comments:
ProductName: Utility to clean registry
SpecialBuild:
ProductVersion: 1, 0, 0, 3
FileDescription: Stop device and delete registry entries
OriginalFilename: KillReg.exe
Translation: 0x0409 0x04b0

W32.Virut.D also known as:

BkavW32.AIDetect.malware1
K7AntiVirusVirus ( 00001b761 )
LionicTrojan.Win32.Generic.4!c
ClamAVWin.Trojan.Virut-57
CAT-QuickHealW32.Virut.D
McAfeeW32/Virut.rem.D
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_70% (D)
K7GWVirus ( 00001b761 )
Cybereasonmalicious.9ede96
APEXMalicious
AvastWin32:Virut [Inf]
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderTrojan.GenericKD.5986054
MicroWorld-eScanTrojan.GenericKD.5986054
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZexaF.34170.pq0@aChIDDhi
VIPREVirus.Win32.Virut.b (v)
TrendMicroCryp_Virut-4
McAfee-GW-EditionW32/Virut.rem.D
EmsisoftTrojan.GenericKD.5986054 (B)
SentinelOneStatic AI – Malicious PE
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataTrojan.GenericKD.5986054
VBA32Trojan.Wacatac
MAXmalware (ai score=100)
PandaGeneric Suspicious
TrendMicro-HouseCallCryp_Virut-4
RisingTrojan.Generic@ML.85 (RDML:5o1Q4yJUiYf1zbMpgrl5Rg)
FortinetW32/Virut.G
AVGWin32:Virut [Inf]
Paloaltogeneric.ml

How to remove W32.Virut.D?

W32.Virut.D removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment