Win32/Adware.Virtumonde.FP removal instruction

The Win32/Adware.Virtumonde.FP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Adware.Virtumonde.FP virus can do?

• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Yara detections observed in process dumps, payloads or dropped files

How to determine Win32/Adware.Virtumonde.FP?

File Info:
name: 53C4A71F6BCAA0A735B7.mlw
path: /opt/CAPEv2/storage/binaries/0a4b30eee057f7c1fc9596cd441c07f5c5e976d537595af82df6d853518bc5f1
crc32: 745342D8
md5: 53c4a71f6bcaa0a735b7b12e8da1b90c
sha1: a87786a92c1bb94c08a1114db31e066a260ef1fc
sha256: 0a4b30eee057f7c1fc9596cd441c07f5c5e976d537595af82df6d853518bc5f1
sha512: bba685b0528847e2d8f10ac1715edab0557a0eebc999647283216b1d886894dad7295cae0aa0f3d2c1bde0fd0fed66409984dda068561f673854296f338c6ee7
ssdeep: 6144:JbqFUinoscDeJ5AQAJoP01BDuQMq5M9w2ftn44UruImc8qtprX:JbquR1+LAiP01puQte9Z1npAXmR2rX
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1D75422272B1091ACC6964A35777CB4D81EC138739BF8ECB68D8EC2F808719DCD395562
sha3_384: 92e5177b99962244a7095d65be1b96ed4712cef4af1efab1b90cf32f082f4a62a75a0a87b2c61e2e883fc56a50dddfb4
ep_bytes: 807c2408010f85ac01000060be009005
timestamp: 2008-10-04 06:04:04

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Greek IBM 319 Keyboard Layout
FileVersion: 5.1.2600.0 (xpclient.010817-1148)
InternalName: kbdhe319 (3.11)
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: kbdhe319.dll
ProductName: Microsoft® Windows® Operating System
ProductVersion: 5.1.2600.0
Translation: 0x0000 0x04b0

Win32/Adware.Virtumonde.FP also known as:

How to remove Win32/Adware.Virtumonde.FP?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.