W32.Xpiro.N1 removal guide

The W32.Xpiro.N1 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What W32.Xpiro.N1 virus can do?

Unconventionial language used in binary resources: Korean
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine W32.Xpiro.N1?


File Info:
crc32: BFCBD830
md5: 1c79aa0de055f7d4c078fa152fe0e4f4
name: 1C79AA0DE055F7D4C078FA152FE0E4F4.mlw
sha1: 3c721134d645a41feca18bb1f17dfdb054a5accd
sha256: 9070d6bc25e5ba4b743bf9310fcdb562b60d958e02337b548923d0564dbb1810
sha512: e30815dec85d672f22b83c8f2972f7ec892bf3ad3ef0d8a6eeb428bc53c66d256cecae6d51c6cc17c91f334cfcc4b8f99a6ee7bc8fcee2d4a6009c2e2cfdfd6b
ssdeep: 12288:QNRf3HCvGZUXVdtxE1G0KBtZfQNXLzcBwcaMTXc3CmdzQ:QkpdtzBtZoUBBaMKCmd
type: PE32 executable (Unknown subsystem 0x0) Unknown processor type 0x0, for MS Windows

Version Info:
LegalCopyright: SAMSUNG.  All rights reserved.
InternalName: MultiOdin.exe
FileVersion: 1.0.0.1
CompanyName: SAMSUNG
ProductName: Odin Multi Downloader
ProductVersion: 1.0.0.1
FileDescription: Odin Multi Downloader
OriginalFilename: MultiOdin.exe
Translation: 0x0409 0x04e4

W32.Xpiro.N1 also known as:

Bkav	W32.Expiro2NHc.PE
K7AntiVirus	Virus ( 00550a661 )
Elastic	malicious (high confidence)
DrWeb	Win32.Expiro.128
ClamAV	Win.Virus.Expiro-6975989-0
CAT-QuickHeal	W32.Xpiro.N1
Alibaba	Virus:Win32/Expiro.5c2d3e0c
K7GW	Virus ( 00550a661 )
Cybereason	malicious.4d645a
Cyren	W32/Expiro.CB
APEX	Malicious
Avast	Other:Malware-gen [Trj]
Cynet	Malicious (score: 100)
Tencent	Virus.Win32.Expiro.ae
Sophos	Mal/Generic-S
VIPRE	Virus.Win32.Expiro.gp (v)
TrendMicro	PE_EXPIRO.SJ
McAfee-GW-Edition	BehavesLike.Win32.Worm.jc
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Vilsel.auq
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	W32/Expiro.gen.rd
Panda	W32/Expiro.AI
TrendMicro-HouseCall	PE_EXPIRO.SJ
Rising	Virus.Expiro!1.A140 (CLASSIC)
Ikarus	Virus.Win32.Expiro
MaxSecure	Virus.W32.Expiro.NS
Fortinet	W32/EXPIRO.SJ
AVG	Other:Malware-gen [Trj]
Paloalto	generic.ml

How to remove W32.Xpiro.N1?

W32.Xpiro.N1 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X