Should I remove “Win32:Virut-AOZ”?

The Win32:Virut-AOZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:Virut-AOZ virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Creates a hidden or system file

How to determine Win32:Virut-AOZ?


File Info:
crc32: 373FA6F0
md5: 4693b11ecf74b17ab8d7ee6ce6d8820e
name: 4693B11ECF74B17AB8D7EE6CE6D8820E.mlw
sha1: 4ab536d23d1b92fb6b382ea6ba3ad8452a90c82e
sha256: 35baa996d1be3773153c8c03a73c0390fdb17c0f4e53d020f57e6dcb59051a8c
sha512: f59ff2b15a1a2df7195cd40b93560e267905360bb50924c17ef6aec18763ae87e1c7ceca7d5dae7d0593b95cd8cd1b9b6243cb56259a2bcda70e1d2bbe938ba8
ssdeep: 1536:kV8A8Mlr/lUB9RIkiuA3PMza9IjYzBrsp5YYWUtCoOeTgqO5i4hTChhhh5k7ir8:kiYdkRItDBooYWECoOeTgqO5i4hTChh
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: 
FileVersion: 12.0.7600.16385 (win7_rtm.090713-1255)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 12.0.7600.16385
FileDescription: Windows Media Player Network Sharing Service Configuration Application
OriginalFilename: WMPNSCFG.EXE
Translation: 0x0409 0x04b0

Win32:Virut-AOZ also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Cybereason	malicious.23d1b9
Cyren	W32/Virut.D.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Virut-AOZ
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Virus.Win32.Virut-Gen.bwpxnc
Tencent	Win32.Trojan.Generic.Pdmh
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZexaF.34608.fq0@ain8@pdi
McAfee-GW-Edition	BehavesLike.Win32.Virut.nh
FireEye	Generic.mg.4693b11ecf74b17a
SentinelOne	Static AI – Malicious PE
Avira	TR/Patched.Gen
Microsoft	Trojan:Win32/Wacatac.B!ml
TACHYON	Trojan/W32.PornoBlocker.92672.C
Acronis	suspicious
McAfee	Artemis!4693B11ECF74
Malwarebytes	VB.Virus.FileInfector.DDS
Rising	Trojan.Generic!8.C3 (RDMK:cmRtazqHxrWnk8qsuQUV7gUDHNOe)
Ikarus	Virus.Win32.Virtob
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Virut-AOZ
Qihoo-360	HEUR/QVM10.1.F121.Malware.Gen

How to remove Win32:Virut-AOZ?

Win32:Virut-AOZ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X