Malware

Win32/FoxyPeer.B potentially unsafe removal

Malware Removal

The Win32/FoxyPeer.B potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/FoxyPeer.B potentially unsafe virus can do?

  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Authenticode signature is invalid

How to determine Win32/FoxyPeer.B potentially unsafe?


File Info:

name: 8145CE684657C98F68B8.mlw
path: /opt/CAPEv2/storage/binaries/f6dd8a6f8cefc79a698e5d086c15311a96fe724ab464345d2c9f91ce8e9a5066
crc32: 2FE9FCCE
md5: 8145ce684657c98f68b899fd3b0253ee
sha1: eaf34ad8c9649a2206ac58fdbe46b42a733aefb4
sha256: f6dd8a6f8cefc79a698e5d086c15311a96fe724ab464345d2c9f91ce8e9a5066
sha512: d6a5c1eb4c154f893c33845097ae9b08734e7cbf3f2e0034194c9ffac55fd00c7e2d8647d6cb9e8505bc1404d91f6a11f5bb074c10a78313bce391735fd3b194
ssdeep: 49152:18qqoxhhF7u7CdTnMTwm/EjfNTG8pXZSK+znK6qOYMWPXAAzv3FMb7vdubOJ3Gwq:18qFhHa7CdjMUm/EjfNTG8pXZSK+znju
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T105C58D13F2F2807FC6912530CAA5A37A56E0B6F8873286D37E401928DB756C2763DF59
sha3_384: b2cf91b3c76faad60833776866f47f0ec356d60b21d2661ec03494819d255c6ba2b9a7f931905623d233ef57c1d4faf8
ep_bytes: 6a6068a0295c00e851d3ffffbf940000
timestamp: 2005-09-14 06:55:15

Version Info:

CompanyName: Foxy, Inc.
FileDescription: Foxy Network Client Application
FileVersion: 1.7.6.0
InternalName: Foxy.exe
LegalCopyright: (c) 2005 by Foxy, Inc.. All rights reserved.
OriginalFilename: Foxy.exe
ProductName: Foxy Client
ProductVersion: 1.7.6.0
Translation: 0x0804 0x03a8

Win32/FoxyPeer.B potentially unsafe also known as:

BkavW32.Common.4ECB4067
LionicTrojan.Win32.FoxyPeer.4!c
FireEyeTrojan.GenericKD.67456790
SkyhighBehavesLike.Win32.Dropper.vh
ALYacTrojan.GenericKD.67456790
Cylanceunsafe
VIPRETrojan.GenericKD.67456790
K7AntiVirusUnwanted-Program ( 00580fb11 )
K7GWUnwanted-Program ( 00580fb11 )
ArcabitTrojan.Generic.D4054F16
ESET-NOD32a variant of Win32/FoxyPeer.B potentially unsafe
BitDefenderTrojan.GenericKD.67456790
MicroWorld-eScanTrojan.GenericKD.67456790
AvastWin32:Malware-gen
ZillyaTrojan.FoxyPeer.Win32.2
EmsisoftTrojan.GenericKD.67456790 (B)
Antiy-AVLRiskWare/Win32.FoxyPeer
GDataTrojan.GenericKD.67456790
McAfeeArtemis!8145CE684657
MAXmalware (ai score=84)
MalwarebytesRamnit.Virus.FileInfector.DDS
TrendMicro-HouseCallTROJ_GEN.R002H09FA23
MaxSecureTrojan.Malware.205453187.susgen
FortinetRiskware/FoxyPeer
AVGWin32:Malware-gen
DeepInstinctMALICIOUS

How to remove Win32/FoxyPeer.B potentially unsafe?

Win32/FoxyPeer.B potentially unsafe removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment