How to remove “Win32:Viking-CJ [Drp]”?

The Win32:Viking-CJ [Drp] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:Viking-CJ [Drp] virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Drops a binary and executes it
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Win32:Viking-CJ [Drp]?


File Info:
name: 5C11F66B27BA2EFA3914.mlw
path: /opt/CAPEv2/storage/binaries/36deb31c2beddea0fa223262797c39c2380285bab9470700ee74535242dc8f7d
crc32: 138CFBD4
md5: 5c11f66b27ba2efa391430353e69bd7f
sha1: 6a9d3fd580ea8ec49116ca63fcf52230403678f9
sha256: 36deb31c2beddea0fa223262797c39c2380285bab9470700ee74535242dc8f7d
sha512: 5f80088c6803d74e8158bd02462122eb994f70576f634d3ecb3e1e6d887a275cd80699e763adb66271e46941f411dd0f0df837f5438bbd2ae16667907904979c
ssdeep: 49152:RGZtqZaRax4KXDvUIy701vlBM+heh8WcWx11lKtbJ7:BZ7eaGI1vfhAZlQJ7
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16D8523152ECE46B2E0814B3454BE63B59E397C46BE71E30ED744BD8DBDBA201EB16B04
sha3_384: b8263ff67e1c8c5c3781a7b9bc43ff6ca393e37de449553740083215f5b3847075d9e09a91aec8aefda2758575c14af9
ep_bytes: e89b27000050e89b2201000000000090
timestamp: 2005-03-30 18:22:50

Version Info:
0: [No Data]

Win32:Viking-CJ [Drp] also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Refpron.l2It
Elastic	malicious (high confidence)
FireEye	Generic.mg.5c11f66b27ba2efa
McAfee	Artemis!5C11F66B27BA
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.ins
Symantec	Trojan.Gen.MBT
APEX	Malicious
Kaspersky	UDS:Trojan.Win32.Generic
BitDefender	Trojan.GenericKD.68948492
MicroWorld-eScan	Trojan.GenericKD.68948492
Avast	Win32:Viking-CJ [Drp]
Emsisoft	Trojan.GenericKD.68948492 (B)
DrWeb	Trojan.AVKill.10705
VIPRE	Trojan.GenericKD.68948492
McAfee-GW-Edition	BehavesLike.Win32.Virus.tc
Sophos	Mal/Generic-S
GData	Trojan.GenericKD.68948492
Antiy-AVL	Trojan[Dropper]/Win32.Agent.cyni
Arcabit	Trojan.Generic.D41C120C
Microsoft	Trojan:Win32/Wacatac.B!ml
ALYac	Trojan.GenericKD.68948492
MAX	malware (ai score=86)
Malwarebytes	Generic.Malware.AI.DDS
MaxSecure	Trojan.Malware.7164915.susgen
AVG	Win32:Viking-CJ [Drp]
DeepInstinct	MALICIOUS

How to remove Win32:Viking-CJ [Drp]?

Win32:Viking-CJ [Drp] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X