Should I remove “Win32.Virlock.Gen.2”?

The Win32.Virlock.Gen.2 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32.Virlock.Gen.2 virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Win32.Virlock.Gen.2?


File Info:
name: 02AD389ADF2A90054B0B.mlw
path: /opt/CAPEv2/storage/binaries/2954c2cba5635dc510011e3cd28cd7d0de276534cf6439180247c46c1c53ac53
crc32: B0BB7414
md5: 02ad389adf2a90054b0bc43e67ce365f
sha1: 501804e1651e87fd5d63d2a83db96cdf3f3a5139
sha256: 2954c2cba5635dc510011e3cd28cd7d0de276534cf6439180247c46c1c53ac53
sha512: 61f3c1c6541a0411439f2de08cf37262713d8fc77a4bde12c8b4c0164da6501961d29c9d4ec34dbc53d1af9e57860014ccb58b33aa12f3a93dba820a2b4407fb
ssdeep: 24576:eyqoDU+j9WjWy431jYwAoyoILLG3vhHixA83HqmH5Hx2xV:eeDUe9WjL431cwAocLLG3vhHpaHqmH5H
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19F35CE110E627038E8FBDFF0DE8D549236DCA1BEC1BE3042D9E214DBE58D69438664E9
sha3_384: dee8dabb7ef6dae9b5200e9b66dd93271388c89f4c6da07a8d7275b19b5a1e439097fa72b96ebc110c672657638f09fa
ep_bytes: e8197c11003d1bffffff0f8506000000
timestamp: 2015-02-07 09:53:36

Version Info:
0: [No Data]

Win32.Virlock.Gen.2 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Win32.Virlock.Gen.2
FireEye	Generic.mg.02ad389adf2a9005
McAfee	W32/VirRansom.b!02AD389ADF2A
VIPRE	Virus.Win32.Nabucur.b (v)
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan ( 0040fa481 )
K7AntiVirus	Trojan ( 0040fa481 )
Baidu	Win32.Virus.Virlock.e
Symantec	W32.Virlock!gen6
APEX	Malicious
ClamAV	Win.Virus.Virlock-6332874-0
BitDefender	Win32.Virlock.Gen.2
Ad-Aware	Win32.Virlock.Gen.2
TACHYON	Virus/W32.VirRansom
Emsisoft	Win32.Virlock.Gen.2 (B)
Comodo	Virus.Win32.Virlock.jet@5jiemd
DrWeb	Win32.VirLock.10
TrendMicro	PE_VIRLOCK.I-O
McAfee-GW-Edition	BehavesLike.Win32.VirRansom.tc
Sophos	ML/PE-A + W32/VirRnsm-C
Ikarus	Virus.Win32.Virlock
GData	Win32.Virlock.Gen.2
Jiangmin	Win32/Polyransom.b
Antiy-AVL	Trojan/Generic.ASVirus.1F3
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Win32/Nabucur.D.X1506
Acronis	suspicious
BitDefenderTheta	AI:FileInfector.D99EC0B613
ALYac	Win32.Virlock.Gen.2
MAX	malware (ai score=85)
TrendMicro-HouseCall	PE_VIRLOCK.I-O
Rising	Virus.VirLock!1.A08A (CLASSIC)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Virlock.B
Cybereason	malicious.adf2a9

How to remove Win32.Virlock.Gen.2?

Win32.Virlock.Gen.2 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X