Categories: Worm

Should I remove “Worm.Autorun.ne”?

The Worm.Autorun.ne is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Worm.Autorun.ne virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Worm.Autorun.ne?


File Info:
name: 41184954F89DC41314CE.mlwpath: /opt/CAPEv2/storage/binaries/41a170ff9c03e284c4c972113d3ff4a83348e8fe3c0db49c6936fa8e618db8a9crc32: 1B62B76Cmd5: 41184954f89dc41314ce6f11294a55f9sha1: 8da3bddae09557e3f0c5288ac82d64ca858a94a5sha256: 41a170ff9c03e284c4c972113d3ff4a83348e8fe3c0db49c6936fa8e618db8a9sha512: f637c2e529915ac48a3794f86db5c3e1e2a989f9e197908a3076859da33b83803b62f15bb54648129b928b4e87ba6b88250494f8d9af1cb022529a40f762963essdeep: 768:KnbEUh3fy8YyqV1mtThZAXAWhNefwMJ7BikibDVgPsNE+TC84VBIxDfiQoP9aK/k:8bv3ahJkhZyh6w6ikEPTd4Vq3UT8type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T159E3B262F3C18F1BE95917B58BED868C36B1E18A4B4B5B0F3099D75DBE013F9684E180sha3_384: e16a552c5bc54a5e48abe24814b6430977824c26b22f766b9541da4455c0a06b440e4477c313f41cc3020ed7c0393c8fep_bytes: 60681e8d0200680010400068e3a44700timestamp: 1992-06-19 22:22:17
Version Info:
0: [No Data]

Worm.Autorun.ne also known as:

Bkav	W32.AIDetect.malware1
DrWeb	Win32.HLLP.Stone.3
MicroWorld-eScan	Trojan.GenericKDZ.87278
McAfee	GenericRXDT-PB!41184954F89D
Sangfor	Suspicious.Win32.Save.a
Cybereason	malicious.ae0955
Cyren	W32/Bero.A.gen!Eldorado
Symantec	Trojan.Gen.2
Elastic	malicious (high confidence)
TrendMicro-HouseCall	Mal_Bero
ClamAV	Win.Malware.Mepaow-6725393-0
BitDefender	Trojan.GenericKDZ.87278
Ad-Aware	Trojan.GenericKDZ.87278
Sophos	Generic ML PUA (PUA)
Comodo	TrojWare.Win32.Patched.KSU@5t5qg6
TrendMicro	Mal_Bero
McAfee-GW-Edition	BehavesLike.Win32.Generic.ct
SentinelOne	Static AI – Malicious PE
FireEye	Generic.mg.41184954f89dc413
Emsisoft	Trojan.GenericKDZ.87278 (B)
Ikarus	Win32.Heur
GData	Trojan.GenericKDZ.87278
Jiangmin	Trojan.Generic.hgvpl
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Bero.R481025
VBA32	Worm.Autorun.ne
ALYac	Trojan.GenericKDZ.87278
APEX	Malicious
MAX	malware (ai score=84)
Fortinet	W32/Bero.70D1!tr
CrowdStrike	win/malicious_confidence_90% (W)