Worm

Should I remove “Worm:Win32/Phorpiex.B”?

Malware Removal

The Worm:Win32/Phorpiex.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm:Win32/Phorpiex.B virus can do?

  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Worm:Win32/Phorpiex.B?


File Info:

crc32: 3EA12314
md5: 2f9627e282f7724db5ac338555c99fee
name: 2F9627E282F7724DB5AC338555C99FEE.mlw
sha1: 13b12c037c8e0d8b68fe5d633a879ca6255351e4
sha256: 65ecd8d6979d68bc6fe23af0f562042f8c1a0fc7c23721f3aef3bcdbbb558f58
sha512: ce1f8baa5954711a58bc63e413d806630d7b768a10527abf612e31ae9639b8d24068dbf2993654d59683590af8d383f68cb48856902b23ae751c2ce4ed19de63
ssdeep: 1536:ycMCBoDz6xNpU/AQCcXM6f73ZqzHETt5:zSz6xE/AcXVf9qwTj
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Worm:Win32/Phorpiex.B also known as:

K7AntiVirusTrojan ( 0040f74a1 )
Elasticmalicious (high confidence)
DrWebWin32.HLLW.Phorpiex.54
CynetMalicious (score: 100)
CAT-QuickHealWorm.Phorpiex.B8
ALYacDeepScan:Generic.Malware.SMeYBd.D450511E
CylanceUnsafe
ZillyaDropper.Sysn.Win32.358
SangforTrojan.Win32.Agent.atASTZ
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Injector.75e7a32a
K7GWTrojan ( 0040f74a1 )
Cybereasonmalicious.282f77
SymantecW32.IRCBot
ESET-NOD32Win32/Injector.AVGL
APEXMalicious
AvastFileRepMalware
ClamAVWin.Malware.Agent-9796620-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderDeepScan:Generic.Malware.SMeYBd.D450511E
NANO-AntivirusTrojan.Win32.Sysn.cslwrc
MicroWorld-eScanDeepScan:Generic.Malware.SMeYBd.D450511E
TencentMalware.Win32.Gencirc.11b1b11e
Ad-AwareDeepScan:Generic.Malware.SMeYBd.D450511E
SophosMal/Generic-S
ComodoMalware@#3ahd6kasbnqf4
BitDefenderThetaAI:Packer.6FB0A0F81F
VIPRETrojan.Win32.Simda.ba (v)
TrendMicroWORM_PHORPX.SMA
McAfee-GW-EditionBehavesLike.Win32.Dropper.nh
FireEyeGeneric.mg.2f9627e282f7724d
EmsisoftDeepScan:Generic.Malware.SMeYBd.D450511E (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan/IRCBot.br
WebrootW32.Malware.Gen
AviraTR/Drop.Agent.nguwqa
eGambitGeneric.Malware
Antiy-AVLTrojan/Generic.ASMalwS.30CBA32
KingsoftWin32.Troj.Sysn.ab.(kcloud)
MicrosoftWorm:Win32/Phorpiex.B
GDataDeepScan:Generic.Malware.SMeYBd.D450511E
AhnLab-V3Trojan/Win32.Zbot.R99335
McAfeeGenericRXAA-AA!2F9627E282F7
MAXmalware (ai score=100)
VBA32TrojanDropper.Sysn
MalwarebytesMalware.AI.3861991941
PandaTrj/Genetic.gen
TrendMicro-HouseCallWORM_PHORPX.SMA
YandexTrojan.GenAsa!HY1uj0IiWWA
IkarusTrojan.Win32.IRCBot
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Injector.AVGL!tr
AVGFileRepMalware
Paloaltogeneric.ml

How to remove Worm:Win32/Phorpiex.B?

Worm:Win32/Phorpiex.B removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment