Worm.Win32.AutoRun.hpkw removal tips

The Worm.Win32.AutoRun.hpkw is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Worm.Win32.AutoRun.hpkw virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Creates an autorun.inf file
• Authenticode signature is invalid
• Installs itself for autorun at Windows startup
• Anomalous binary characteristics

How to determine Worm.Win32.AutoRun.hpkw?

File Info:
name: 809ABF8B5445FCA78F93.mlw
path: /opt/CAPEv2/storage/binaries/513657207e72688fcb6d539fd2758299ac15932fa51ec0767c3e41df28e51150
crc32: D25F6698
md5: 809abf8b5445fca78f93e6d9f8453356
sha1: 1e615fe208a2888b7eb62e1fe73087ca95d05ab7
sha256: 513657207e72688fcb6d539fd2758299ac15932fa51ec0767c3e41df28e51150
sha512: e05a45706f5f7fae1bfdaab4b0dd414d89133afbf710df93f4281654b2f7943b0c34faf11947861d29236d80fc205f80ebc1ae239f8bd617957697ae728b711a
ssdeep: 3072:vxFMjrud39T/gpTbz/8Ys3rC1OiZ/JyTpHoekckGD6eFCpc6MxvYQD85/qN4:vtv8c3COiZ/Juf5kFyPxI/e4
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F0049CE29563B4CCF216437CBC14C75258528DABE29467D078B11F8C83A642F8E6BF4E
sha3_384: dcaa1e020741030a510b82c65cb763a2514542fc99ff5478bad52dc2ca3fbb913e8751c88c66fdb18b88cbb1dbc8dbe8
ep_bytes: 6a40680010000068a08601006a00ff15
timestamp: 2012-09-05 20:26:28

Version Info:
0: [No Data]

Worm.Win32.AutoRun.hpkw also known as:

How to remove Worm.Win32.AutoRun.hpkw?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.