Win32/SecurityXploded.P potentially unsafe removal

The Win32/SecurityXploded.P potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/SecurityXploded.P potentially unsafe virus can do?

Creates RWX memory
Dynamic (imported) function loading detected
Performs HTTP requests potentially not found in PCAP.
Reads data out of its own binary image
Authenticode signature is invalid
Attempts to modify proxy settings

Related domains:

wpad.local-net

securityxploded.net

How to determine Win32/SecurityXploded.P potentially unsafe?


File Info:
name: CA41A32BE7D44D515D91.mlw
path: /opt/CAPEv2/storage/binaries/e69eaf71d57affdb08b54881dada7cfb0f3b1da841c2510462cf1db99e8dbed0
crc32: 3A514635
md5: ca41a32be7d44d515d919c1ca7077c0a
sha1: bd0916215d00847bec85c98c1ef46ae5f3658750
sha256: e69eaf71d57affdb08b54881dada7cfb0f3b1da841c2510462cf1db99e8dbed0
sha512: 662e5ca419af96cbe3bf57c32af9ab31236b72043334127c32a2b6f900f41ab6544ca6a42b107678c43961c172188e50e486a8f93deaa677d92e70ac5287f5c3
ssdeep: 6144:Ze34LKOsyFot2bSrr+QbPQwwhdtCYp9/HDqJOHfoxOhOY3xjeJNT:LOkof+Qkh1p9/HDqJVOhZ3le5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15C84E1697BE25F7FC4451931251343F603B0FDD80A81AF23AED5BF2E387A0D6066954A
sha3_384: 35902b747c03ed9defc306d9ea237e91278004919be0aa6eeaeb0dd98d6e96858e409275dba03ff0231be6aecd1a4bc3
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-12-05 22:50:52

Version Info:
CompanyName: SX Network
FileDescription: Installer
FileVersion: 1.0
LegalCopyright: Copyright © 2007-2015, All rights reserved
LegalTrademarks: 
ProductName: PinterestBlocker
ProductVersion: 1.0
Translation: 0x0409 0x04e4

Win32/SecurityXploded.P potentially unsafe also known as:

Lionic	Trojan.Win32.Genome.a!c
MicroWorld-eScan	Trojan.GenericKD.47476291
McAfee	RDN/Generic Downloader.x
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Unwanted-Program ( 004d38111 )
K7GW	Unwanted-Program ( 004d38111 )
Cybereason	malicious.15d008
Cyren	W32/Downloader.VA.gen!Eldorado
Symantec	Trojan.Gen.2
ESET-NOD32	Win32/SecurityXploded.P potentially unsafe
APEX	Malicious
Kaspersky	Trojan-Downloader.Win32.Genome.wucp
BitDefender	Trojan.GenericKD.47476291
NANO-Antivirus	Trojan.Nsis.Dwn.dyzajj
SUPERAntiSpyware	Trojan.Agent/Gen-Downloader
Avast	FileRepMetagen [Malware]
Tencent	Win32.Trojan-downloader.Genome.Syrh
Ad-Aware	Trojan.GenericKD.47476291
Sophos	Security Xploded (PUA)
Comodo	Malware@#1tgxnrgkh2xvh
DrWeb	Trojan.DownLoader17.63273
TrendMicro	TROJ_GEN.R002C0PKN21
McAfee-GW-Edition	RDN/Generic Downloader.x
FireEye	Trojan.GenericKD.47476291
Emsisoft	Trojan.GenericKD.47476291 (B)
GData	Trojan.GenericKD.47476291
Antiy-AVL	Trojan/Generic.ASMalwNS.1BA
Gridinsoft	Ransom.Win32.Wacatac.sa
Arcabit	Trojan.Generic.D2D46E43
ViRobot	Trojan.Win32.Z.Securityxploded.403019
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Downloader/Win32.Genome.C2289188
ALYac	Trojan.GenericKD.47476291
MAX	malware (ai score=95)
VBA32	suspected of Trojan.Downloader.gen
TrendMicro-HouseCall	TROJ_GEN.R002C0PKN21
Fortinet	W32/Genome.P!tr.dldr
AVG	FileRepMetagen [Malware]

How to remove Win32/SecurityXploded.P potentially unsafe?

Win32/SecurityXploded.P potentially unsafe removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/SecurityXploded.P potentially unsafe removal