Malware

Win32.Savior.1696 removal guide

Malware Removal

The Win32.Savior.1696 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32.Savior.1696 virus can do?

  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32.Savior.1696?


File Info:

crc32: 4407C187
md5: 6d33ca79efd3fa597aeb1ca68babaaef
name: 6D33CA79EFD3FA597AEB1CA68BABAAEF.mlw
sha1: 5f8bfd22a4aa437ffc96897599f88dc5c4e14642
sha256: 88db59378cf7410e6a10ac7eada93da6248dbc7f11e19a68b7a3617f575f3733
sha512: 35315c19afaed9a03d1aee10fd939e202016d58133a6f987243594520471518dd17b72ed30608c32348bea32498a719e88d53f4f24d1ad1aaf7438c58934b1bb
ssdeep: 48:OEPHER4UMGLCeB3ICgZNIMvRhGbiYSeJY8JTaUcoB:nPkCFGmhP0bl
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Win32.Savior.1696 also known as:

LionicVirus.Win32.Savior.n!c
Elasticmalicious (high confidence)
DrWebWin32.Darling.1696
ALYacWin32.Savior.1696
CylanceUnsafe
CrowdStrikewin/malicious_confidence_70% (D)
K7GWVirus ( 0040f58a1 )
K7AntiVirusVirus ( 0040f58a1 )
CyrenW32/SmallTrojan.C.gen!Eldorado
SymantecW32.Savior.1696
ESET-NOD32Win32/Savior.1696
APEXMalicious
AvastFileRepMalware
CynetMalicious (score: 100)
KasperskyVirus.Win32.Savior.1696
BitDefenderWin32.Savior.1696
NANO-AntivirusVirus.Win32.Savior.iogpsr
MicroWorld-eScanWin32.Savior.1696
TencentVirus.Win32.Darling.v
Ad-AwareWin32.Savior.1696
SophosML/PE-A + Junk/Savior1696
ComodoVirus.Win32.Savior.16960@1n9lri
F-SecureMalware.W32/Savior.1696
BitDefenderThetaGen:NN.ZexaF.34142.amHfa4Mrn4f
TrendMicroPE_SAVIOR.1696
McAfee-GW-EditionBehavesLike.Win32.Generic.zz
FireEyeGeneric.mg.6d33ca79efd3fa59
EmsisoftWin32.Savior.1696 (B)
SentinelOneStatic AI – Malicious PE
JiangminWin32/Savior.1696
AviraW32/Savior.1696
eGambitUnsafe.AI_Score_100%
KingsoftWin32.Infected.AutoInfector.a.(kcloud)
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitWin32.Savior.1696
ZoneAlarmVirus.Win32.Savior.1696
GDataWin32.Savior.1696
AhnLab-V3Win32/Savior
McAfeeArtemis!6D33CA79EFD3
MAXmalware (ai score=87)
VBA32Win32.Intended.Savior.1696
MalwarebytesMalware.Heuristic.1003
PandaW95/Savior.1696
TrendMicro-HouseCallPE_SAVIOR.1696
RisingWin32.Savior (CLASSIC)
YandexWin32.Savior.1696
IkarusVirus.Win32.Savior
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Savior.1696
AVGFileRepMalware
Paloaltogeneric.ml

How to remove Win32.Savior.1696?

Win32.Savior.1696 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment