Worm:Win32/Mothyfil.B removal tips

The Worm:Win32/Mothyfil.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Worm:Win32/Mothyfil.B virus can do?

How to determine Worm:Win32/Mothyfil.B?


File Info:
crc32: 91CC95F3
md5: 09ca486ae0b195d4fc22f696966de5ee
name: 09CA486AE0B195D4FC22F696966DE5EE.mlw
sha1: f8bc411ffa92cde5e12215a787bed2ae069014c4
sha256: aa21979a047f33a5ee7302b14fbf2b630c8df9f1f9fdf2574e1339ab9f5102b1
sha512: c33e326a7bb576450bfe1aa16a7ef8f6bb1df47adc842281bb9c57e3435ed01006534b4d2b76e2402702e6e3cdc9116ed86eaa129c43b3c6a507d7a1c7c4c526
ssdeep: 6144:GILAXlc5dRnhD2TnTXaZ8res6cXI1SICbj4hIaMsZDg4O9miEJnNc75+0Wi7:Grl0YQdTCbj4LjOGJniN+0J
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Worm:Win32/Mothyfil.B also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.VbCrypt.250
Cynet	Malicious (score: 100)
ALYac	Gen:Heur.Ransom.Cerber.2
Cylance	Unsafe
Sangfor	Virus_Suspicious.Win32.Sality.bh
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Virus ( f10001071 )
K7AntiVirus	Virus ( f10001071 )
Baidu	Win32.Trojan.VB.ar
Cyren	W32/Sality.E.gen!Eldorado
Symantec	W32.Virut.CF
APEX	Malicious
Avast	Win32:Evo-gen [Susp]
ClamAV	Win.Dropper.Bancos-9859520-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Heur.Ransom.Cerber.2
NANO-Antivirus	Virus.Win32.Gen.ccmw
MicroWorld-eScan	Gen:Heur.Ransom.Cerber.2
Ad-Aware	Gen:Heur.Ransom.Cerber.2
Sophos	Mal/Generic-S
Comodo	TrojWare.Win32.VB.QZY@5045k8
BitDefenderTheta	Gen:NN.ZexaF.34738.xmX@ai0jOEh
VIPRE	Virus.Win32.Sality.at (v)
TrendMicro	PE_SALITY.RL
McAfee-GW-Edition	BehavesLike.Win32.Generic.fh
FireEye	Generic.mg.09ca486ae0b195d4
Emsisoft	Gen:Heur.Ransom.Cerber.2 (B)
Jiangmin	Win32/HLLP.Kuku.poly2
Avira	TR/Patched.Ren.Gen
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.25B508C
Microsoft	Worm:Win32/Mothyfil.B
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Heur.Ransom.Cerber.2
AhnLab-V3	Trojan/Win32.Xema.C65103
Acronis	suspicious
McAfee	Artemis!09CA486AE0B1
MAX	malware (ai score=99)
VBA32	Trojan.VBKrypt
Panda	Trj/CI.A
TrendMicro-HouseCall	PE_SALITY.RL
Rising	Trojan.Agent!1.9D4E (CLASSIC)
Ikarus	Worm.Win32.AutoRun
AVG	Win32:Evo-gen [Susp]
Paloalto	generic.ml

How to remove Worm:Win32/Mothyfil.B?

Worm:Win32/Mothyfil.B removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X