Worm

Worm:Win32/Autorun.ZJ (file analysis)

Malware Removal

The Worm:Win32/Autorun.ZJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Worm:Win32/Autorun.ZJ virus can do?

  • Authenticode signature is invalid

How to determine Worm:Win32/Autorun.ZJ?



File Info:

name: B8319DF43A098C961B01.mlw
path: /opt/CAPEv2/storage/binaries/1122caaf6eb2495dfccb1b94681de97a1125cefd8baba1ff761aa893d9515d43
crc32: 1745FA61
md5: b8319df43a098c961b0141782c0d1740
sha1: ee26fc4348870a30ca7235ff608885461571bd05
sha256: 1122caaf6eb2495dfccb1b94681de97a1125cefd8baba1ff761aa893d9515d43
sha512: 05a746334e55130cd6ce46979f93a50e3ea623e875e229bb3bb60521da094ee39d8810b68bf520e447bebff6aadd6f567bf1b89abed13f29a50a3efd1ce0da32
ssdeep: 3072:CN384NYcva7ba1LaIbhRdSq6j4jq+IFTUJZ1pz0IWBLM4Ec+d8FnmmoCes:CNZO1ZKDpz5WN9F1FmIN
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1D8C38C033EA5C8B6F0B7083D25454BB0D65F5E704C676843AB0A3B94BEB1981EB2B357
sha3_384: aeec03106e156c0fc889111997d2166bda41b398e5e391c22313b7578e09b5f2e3f1651df257ab3bc67a73998aab9093
ep_bytes: 558bec538b5d08568b750c578b7d1085
timestamp: 2010-10-24 02:47:12


Version Info:

Comments: 
CompanyName: 
FileDescription: QuickFlash Module
FileVersion: 1, 0, 0, 1
InternalName: QUICKFLASH
LegalCopyright: Copyright 1997
LegalTrademarks: 
OLESelfRegister: 
OriginalFilename: FSUTK.DLL
PrivateBuild: 
ProductName: QuickFlash Module
ProductVersion: 1, 0, 0, 1
SpecialBuild: 
Translation: 0x0409 0x04b0

Worm:Win32/Autorun.ZJ also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Agent.Y!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Liprip.1
ClamAVWin.Adware.BHO-7080
FireEyeGeneric.mg.b8319df43a098c96
CAT-QuickHealAdWare.BHO.qa5
SkyhighBehavesLike.Win32.Infected.ch
McAfeeW32/Autorun.worm.bfy
Cylanceunsafe
VIPREGen:Variant.Liprip.1
SangforSuspicious.Win32.Save.ins
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaWorm:Win32/Autorun.67045f2a
K7GWP2PWorm ( 004cb5291 )
K7AntiVirusAdware ( 001f4caf1 )
SymantecBackdoor.Ripinip
ESET-NOD32a variant of Win32/AutoRun.OH
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Agent.nevwbg
BitDefenderGen:Variant.Liprip.1
NANO-AntivirusRiskware.Win32.BHO.bpabd
AvastWin32:AutoRun-BRN [Trj]
TencentWorm.Win32.Autorun.g
EmsisoftGen:Variant.Liprip.1 (B)
F-SecureDialer.DIAL/Dialer.Gen
DrWebWin32.HLLW.Riplip.68
ZillyaAdware.BHO.Win32.4144
TrendMicroTROJ_AGENT_044820.TOMB
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.Liprip.1
JiangminAdware/BHO.bvn
WebrootW32.Malware.Gen
GoogleDetected
AviraDIAL/Dialer.Gen
MAXmalware (ai score=99)
Antiy-AVLGrayWare[AdWare]/Win32.BHO
KingsoftWin32.Trojan.Agent.nevwbg
XcitiumBackdoor.Win32.Ripinip.~LSU@2qgmj2
ArcabitTrojan.Liprip.1
ZoneAlarmTrojan.Win32.Agent.nevwbg
MicrosoftWorm:Win32/Autorun.ZJ
VaristW32/AdAgent.T.gen!Eldorado
AhnLab-V3Adware/Win32.BHO.R1998
BitDefenderThetaGen:NN.ZedlaF.36744.hu8@aaNyhGdi
ALYacGen:Variant.Liprip.1
TACHYONTrojan-Clicker/W32.BHO.118784.CN
VBA32BScope.Adware.Infun
MalwarebytesGeneric.Malware.AI.DDS
PandaBck/Liprip.gen
TrendMicro-HouseCallTROJ_AGENT_044820.TOMB
RisingAdWare.Win32.Fsutk.a (CLASSIC)
YandexTrojan.GenAsa!byeVQKvh8GU
IkarusTrojan.Win32.Pirril
MaxSecurenot-a-virus:Adware.BHO.qbi
FortinetW32/AutoRun.OH!tr
AVGWin32:AutoRun-BRN [Trj]
DeepInstinctMALICIOUS

How to remove Worm:Win32/Autorun.ZJ?

Worm:Win32/Autorun.ZJ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment