Malware

Win32:AutoRun-AYS [Wrm] removal guide

Malware Removal

The Win32:AutoRun-AYS [Wrm] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Win32:AutoRun-AYS [Wrm] virus can do?

  • Authenticode signature is invalid

How to determine Win32:AutoRun-AYS [Wrm]?



File Info:

name: E68D39F74BD1C33DB272.mlw
path: /opt/CAPEv2/storage/binaries/1e605d48df801955067fede1f4b315d9ecbcb11a8575bdab2b594d37388f3307
crc32: FB884431
md5: e68d39f74bd1c33db272c68ff58d9965
sha1: ede21baadff2c52ef66e2461249838732dff2c96
sha256: 1e605d48df801955067fede1f4b315d9ecbcb11a8575bdab2b594d37388f3307
sha512: 32ce519c1ada29f1a67b826f9595f72e137a961b66e1a15ec6e424a279e3c9e07d7a1c8aa02153c67ef6e6bd4e9800eaacbf04d7f5208cf7a80ba5d3de843ebb
ssdeep: 768:QhzsIdmoIBW+J1wauLiANtg9bPHhHXPNWNCB+Gc1H8zHvc:QJsIdmoIBW+fwhDtg9zxB+52Dvc
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C2E2B53B7356092ADA4972397253CBDB61E360991F4B2A87763133BDED34E101D62B83
sha3_384: 58b157bf72229dcf0033688a71facc5372eafafecf9733884838bc4cf77d1b4be2e01d62beec7211f87747040733c548
ep_bytes: 6810124000e8eeffffff000000000000
timestamp: 2000-01-01 12:00:00


Version Info:

Translation: 0x0409 0x04b0

Win32:AutoRun-AYS [Wrm] also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Trojan.Chinky.2
FireEyeGeneric.mg.e68d39f74bd1c33d
CAT-QuickHealTrojan.VBCrypt.MF.139
SkyhighBehavesLike.Win32.VBObfus.nm
McAfeeVBObfus
MalwarebytesGeneric.Malware.AI.DDS
ZillyaWorm.VBNA.Win32.62556
SangforSuspicious.Win32.Save.vb
K7AntiVirusTrojan ( f1000d031 )
K7GWTrojan ( f1000d031 )
BaiduWin32.Worm.VB.li
SymantecW32.Changeup
tehtrisGeneric.Malware
ESET-NOD32Win32/AutoRun.VB.FL
APEXMalicious
TrendMicro-HouseCallWORM_VB.SMP
ClamAVWin.Trojan.Agent-35777
KasperskyWorm.Win32.VBNA.abqp
BitDefenderGen:Trojan.Chinky.2
NANO-AntivirusTrojan.Win32.VB.coonke
SUPERAntiSpywareTrojan.Agent/Gen-NameThief[Smart]
AvastWin32:AutoRun-AYS [Wrm]
TencentWorm.Win32.Vbna.ki
EmsisoftGen:Trojan.Chinky.2 (B)
F-SecureTrojan.TR/Dropper.Gen
DrWebWin32.HLLW.Autoruner.7170
VIPREGen:Trojan.Chinky.2
TrendMicroWORM_VB.SMP
Trapminemalicious.high.ml.score
SophosMal/SillyFDC-D
MAXmalware (ai score=88)
JiangminWorm/VBNA.hbui
WebrootW32.Trojan.Gen
GoogleDetected
AviraTR/Dropper.Gen
VaristW32/VB.W.gen!Eldorado
Antiy-AVLWorm/Win32.VBNA
Kingsoftmalware.kb.a.1000
MicrosoftWorm:Win32/Vobfus.B
XcitiumWorm.Win32.VBNA.~L@1ealkg
ArcabitTrojan.Chinky.2
ZoneAlarmWorm.Win32.VBNA.abqp
GDataGen:Trojan.Chinky.2
CynetMalicious (score: 100)
AhnLab-V3Worm/Win32.Basun.R1388
Acronissuspicious
BitDefenderThetaAI:Packer.41CA06831F
ALYacGen:Trojan.Chinky.2
VBA32SScope.Trojan.VB.Svchorse.030
Cylanceunsafe
PandaW32/Vobfus.gen.worm
RisingWorm.Win32.Vobfus.l (CLASSIC)
IkarusWorm.Win32.Vobfus
MaxSecureTrojan.Malware.866912.susgen
FortinetW32/VBNA.E!tr
AVGWin32:AutoRun-AYS [Wrm]
DeepInstinctMALICIOUS
alibabacloudWorm:Win/Vobfus.4e6d53db

How to remove Win32:AutoRun-AYS [Wrm]?

Win32:AutoRun-AYS [Wrm] removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment