What is “Worm.Generic.25124 (B)”?

The Worm.Generic.25124 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Worm.Generic.25124 (B) virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Creates RWX memory
• Dynamic (imported) function loading detected
• Authenticode signature is invalid
• Installs itself for autorun at Windows startup
• Anomalous binary characteristics
• Attempts to modify Explorer settings to prevent file extensions from being displayed
• Attempts to modify Explorer settings to prevent hidden files from being displayed

How to determine Worm.Generic.25124 (B)?

File Info:
name: 4E4C75B5945CB7FD5139.mlw
path: /opt/CAPEv2/storage/binaries/e9c4b079fd2f566748d5c57ed60a70c7672582318ab2bbe648bce2758f463f8b
crc32: 7379FF06
md5: 4e4c75b5945cb7fd513913e8d9cf8e7a
sha1: c28085db890a44daf5c2ff0ed7a25f0a98c35ee4
sha256: e9c4b079fd2f566748d5c57ed60a70c7672582318ab2bbe648bce2758f463f8b
sha512: 2b534c3fea61c173b87076201a5f5b01317d082a658e84d8860a47ab5273615fa6bf429d144d868b0381316ac17ee912ed1bf7fa9bc4210b8dccf7aaf7acf0ff
ssdeep: 1536:+TQVgd54vlVr43oQOdjIeIBkPQ54vTgzQ:aL7q8fUj5kmmdz
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T150249603A216B1E4E82CC87B151771F62BCA2C715E0AAD177159BF3738721E47E16B2B
sha3_384: 9f6a12b8d6442f9c954f9deb401478f9fc1024861b70b91a9a1e6a8763af80113021b3742696af6498de2479ab29a5ce
ep_bytes: 681c554100e8f0ffffff000000000000
timestamp: 1999-12-31 18:49:21

Version Info:
Translation: 0x0409 0x04b0
ProductName: Project1
FileVersion: 1.00
ProductVersion: 1.00
InternalName: SHURIKEN 3
OriginalFilename: SHURIKEN 3.exe

Worm.Generic.25124 (B) also known as:

How to remove Worm.Generic.25124 (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.