Categories: Worm

Worm:Win32/Dumpy removal tips

The Worm:Win32/Dumpy is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm:Win32/Dumpy virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Worm:Win32/Dumpy?


File Info:

crc32: 808C909Fmd5: ecdf65c85995f00e02b5ecfdb05df34aname: ECDF65C85995F00E02B5ECFDB05DF34A.mlwsha1: 39de063ba3d3e576a619c9d16d5db50f099c768esha256: 2b638dc4b00a20b2d2b678149bc2dc0477e84bf2b6b288d90d56ec80dc9ca883sha512: 8f9f37d8f12cd1f9f89d19d4bbe2088d9ad9c10ab3a2b5d7ababe33f9e5c47a5e72fa29236a615f0c9445bfa351d64cc61c78e2cc0710d1977b22e1605f4442cssdeep: 96:bGrHCOPJpHf2H7veESGicTCP2+x1aWu4U:irHCe/Kv/JGwtype: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

Worm:Win32/Dumpy also known as:

Bkav W32.AIDetect.malware1
K7AntiVirus Trojan ( 004efecd1 )
Lionic Trojan.Win32.Blocker.tn2W
Elastic malicious (high confidence)
DrWeb Trojan.AVKill.63085
Cynet Malicious (score: 100)
ALYac Gen:Variant.Fugrafa.1853
Cylance Unsafe
Zillya Trojan.Blocker.Win32.33950
Sangfor Suspicious.Win32.Save.a
CrowdStrike win/malicious_confidence_80% (D)
K7GW Trojan ( 004efecd1 )
Cybereason malicious.85995f
Baidu Win32.Worm.Agent.fg
Symantec Trojan.Gen
ESET-NOD32 Win32/Agent.NMK
Zoner Trojan.Win32.17898
APEX Malicious
Avast Win32:Trojan-gen
ClamAV Win.Trojan.Agent-1176519
Kaspersky Trojan-Ransom.Win32.Blocker.gfeq
BitDefender Gen:Variant.Fugrafa.1853
NANO-Antivirus Trojan.Win32.Agent.cqiled
MicroWorld-eScan Gen:Variant.Fugrafa.1853
Tencent Win32.Trojan.Blocker.Aotj
Ad-Aware Gen:Variant.Fugrafa.1853
Sophos Mal/Generic-R + W32/Dumpy-A
Comodo TrojWare.Win32.Injector.XYNZ@4ri748
BitDefenderTheta Gen:NN.ZexaF.34142.uyW@aC8Zvko
VIPRE Trojan.Win32.Generic!BT
TrendMicro RANSOM_CRYPBLOCKER_FC170087.UVPM
McAfee-GW-Edition Artemis
FireEye Generic.mg.ecdf65c85995f00e
Emsisoft Gen:Variant.Fugrafa.1853 (B)
SentinelOne Static AI – Malicious PE
Jiangmin Trojan/Blocker.knj
Antiy-AVL Trojan/Generic.ASMalwS.1E0DD4
Kingsoft Win32.Troj.Undef.(kcloud)
Microsoft Worm:Win32/Dumpy
GData Gen:Variant.Fugrafa.1853
McAfee Artemis!ECDF65C85995
MAX malware (ai score=100)
Malwarebytes Malware.AI.2089229201
Panda Trj/CI.A
TrendMicro-HouseCall RANSOM_CRYPBLOCKER_FC170087.UVPM
Rising Trojan.Generic@ML.98 (RDML:jXvIGIR8ZaZeIVD/piVa1Q)
Yandex Trojan.Agent!RjmtIHjXKnA
Ikarus Worm.Win32.Dumpy
Fortinet W32/Blocker.GFEQ!tr
AVG Win32:Trojan-gen
Paloalto generic.ml

How to remove Worm:Win32/Dumpy?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Share
Published by
Paul Valéry

Recent Posts

Should I remove “Trojan.Win32.Agent.xbnxrl”?

The Trojan.Win32.Agent.xbnxrl is considered dangerous by lots of security experts. When this infection is active,…

6 mins ago

Malware.AI.2699704795 information

The Malware.AI.2699704795 is considered dangerous by lots of security experts. When this infection is active,…

20 mins ago

Trojan.Win32.Agent.xbnimv information

The Trojan.Win32.Agent.xbnimv is considered dangerous by lots of security experts. When this infection is active,…

21 mins ago

PUP.Optional.WinnerSolutions malicious file

The PUP.Optional.WinnerSolutions is considered dangerous by lots of security experts. When this infection is active,…

26 mins ago

Win32:VB-ADLB [Trj] (file analysis)

The Win32:VB-ADLB [Trj] is considered dangerous by lots of security experts. When this infection is…

1 hour ago

AdWare.Win32.Bundler removal

The AdWare.Win32.Bundler is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago