Malware

How to remove “Win32.XPaj.B”?

Malware Removal

The Win32.XPaj.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32.XPaj.B virus can do?

  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Binary compilation timestomping detected

How to determine Win32.XPaj.B?


File Info:

name: B7F95CEF14BA9042324E.mlw
path: /opt/CAPEv2/storage/binaries/bb236940553384e9dd391e13e37688daf4549ab8c7d4981d9c0d812ac32270e0
crc32: 648B5AB6
md5: b7f95cef14ba9042324ec1a2617162e8
sha1: ee43ed5dae6f9f8d9b50617f6e17e6f1548ebb8b
sha256: bb236940553384e9dd391e13e37688daf4549ab8c7d4981d9c0d812ac32270e0
sha512: 02ec8dedcc15d30b3f6b4da86d14a405cbf700ce11e628faf04fc6a2ef5fdcf9d07e74d9a903cdb9f22e39fceee96798be1bde7871b29130f57d39b88e8e7bf2
ssdeep: 6144:67popiMnrhUjH5pfPgvK0sxHwIIbvHK7aUKE862evdgo9z/rLOmr3ihpeGf3Ce+l:61opRhAZipsxHgS7aUKGvdL9LOmlKSJ
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T172A47D11FA816079C19BC0702AFF6B77D93CBD30576A52D3F7A09F6AA5302C27A34619
sha3_384: 58982b75b835cfebcc9b7fa94e883f4a0bc98eb1f3fbe946bc8868e0fff9c51ca52b3888000bd098c804eefb38c6241f
ep_bytes: 8bff558bec837d0c017505e847ba0100
timestamp: 2046-10-20 05:06:17

Version Info:

CompanyName: Microsoft Corporation
FileDescription: Microsoft ODBC Desktop Driver Pack 3.5
FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
InternalName: odbcjt32.dll
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: odbcjt32.dll
ProductName: Microsoft® Windows® Operating System
ProductVersion: 10.0.17134.1
Translation: 0x0409 0x04b0

Win32.XPaj.B also known as:

BkavW32.AIDetectMalware
LionicVirus.Win32.Xpaj.n!c
Elasticmalicious (high confidence)
MicroWorld-eScanWin32.XPaj.B
ClamAVWin.Trojan.Xpaj-2
FireEyeWin32.XPaj.B
CAT-QuickHealW32.Xpaj.A
SkyhighBehavesLike.Win32.Trojan.gh
McAfeeTrojan-FVNN!B7F95CEF14BA
Cylanceunsafe
SangforVirus.Win32.Xpaj.V864
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaVirus:Win32/Goblin.6e062bc5
K7GWVirus ( 005ab3521 )
K7AntiVirusVirus ( 005ab3521 )
BitDefenderThetaAI:FileInfector.EA694EEA0C
SymantecW32.Xpaj.C
ESET-NOD32Win32/Goblin.A.Gen
APEXMalicious
CynetMalicious (score: 100)
KasperskyVirus.Win32.Goblin.gen
BitDefenderWin32.XPaj.B
NANO-AntivirusVirus.Win32.Goblin.bcufsv
AvastWin32:Goblin
TencentVirus.Win32.Goblin.ka
EmsisoftWin32.XPaj.B (B)
BaiduWin32.Virus.Xpaj.gen
F-SecureMalware.W32/Xpaj.A
DrWebWin32.Goblin
VIPREWin32.XPaj.B
SophosMal/Xpaj-A
SentinelOneStatic AI – Malicious PE
GDataWin32.XPaj.B
VaristW32/Xpaj.A.gen!Eldorado
AviraW32/Xpaj.A
Antiy-AVLVirus/Win32.Goblin.a
ArcabitWin32.XPaj.B
ZoneAlarmVirus.Win32.Goblin.gen
MicrosoftVirus:Win32/Xpaj.gen!A
GoogleDetected
AhnLab-V3Win32/Xpaj
ALYacWin32.XPaj.B
MAXmalware (ai score=83)
VBA32Virus.Goblin.2521
MalwarebytesXpaj.Virus.FileInfector.DDS
PandaTrj/Chgt.AC
IkarusVirus.Win32.Xpaj
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Goblin.A
AVGWin32:Goblin
DeepInstinctMALICIOUS

How to remove Win32.XPaj.B?

Win32.XPaj.B removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment