Categories: Worm

Worm:Win32/Tufik!pz removal instruction

The Worm:Win32/Tufik!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Worm:Win32/Tufik!pz virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Worm:Win32/Tufik!pz?


File Info:
name: BA5E9D4CF571480FDBE7.mlwpath: /opt/CAPEv2/storage/binaries/323ffe5f9c26e5dfede3189a7775bdc08f1b1fd8b9a6ad6daff8d86b1c9c198ecrc32: A8DE7936md5: ba5e9d4cf571480fdbe76c36faed1bb8sha1: 44ecac5fc0633b4939034084d794852ce106d13bsha256: 323ffe5f9c26e5dfede3189a7775bdc08f1b1fd8b9a6ad6daff8d86b1c9c198esha512: a1a0f28553c33d64e057c2bc7b9a78163b945b2d273df5178db4e871b96c6bcb6d38e756972ed678fb6405687de41457da296b6e9149fcaa19546c167b422bb0ssdeep: 24576:2LgV83LzXYJLKSMech6ispJzc5YYmsRr6ylMwpbdgaocZcv:2LgVLKRWTQ6Zs5DhgP9vtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T19225AF13A7D60071F6B23530466FB7756DBE77210A78898D43940A7E5E32E80AF2936Fsha3_384: 5eb2424283718cebcbf6e50fca08a0f3e129da00289fd68504f6825644074a36284b502250e926132414c7c87c538f78ep_bytes: e8000000005b81ebf2084000ff3424e8timestamp: 2085-09-09 11:34:57
Version Info:
CompanyName: Microsoft CorporationFileDescription: Memory DiagnosticFileVersion: 10.0.19041.1 (WinBuild.160101.0800)InternalName: memdiag.exeLegalCopyright: © Microsoft Corporation. All rights reserved.OriginalFilename: memdiag.exeProductName: Microsoft® Windows® Operating SystemProductVersion: 10.0.19041.1Translation: 0x0409 0x04b0

Worm:Win32/Tufik!pz also known as:

MicroWorld-eScan	Generic.Servstart.E.E170A49E
CAT-QuickHeal	W32.Tufik.gen
Skyhigh	BehavesLike.Win32.Worm.fh
McAfee	W32/Nitol.a
Zillya	Dropper.Dinwod.Win32.19905
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Virus ( 004c1ed51 )
K7GW	Virus ( 004c1ed51 )
VirIT	Win32.Tufik.A
Symantec	Trojan.Gen.MBT
Elastic	malicious (high confidence)
ESET-NOD32	Win32/Tufik.NAA
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Malware.Staser-9938521-0
Kaspersky	Trojan-Dropper.Win32.Dinwod.rsj
BitDefender	Generic.Servstart.E.E170A49E
NANO-Antivirus	Trojan.Win32.Crypted.ezgxcy
Avast	Win32:Tufik
Tencent	Virus.Win32.Tufik.aab
Emsisoft	Generic.Servstart.E.E170A49E (B)
F-Secure	Trojan.TR/Spy.Agent.muymz
DrWeb	Trojan.DownLoader.4268
VIPRE	Generic.Servstart.E.E170A49E
TrendMicro	WORM_NITOL.SMB0
Sophos	Troj/Agent-AZZH
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanDropper.Dinwod.bqs
Avira	TR/Spy.Agent.muymz
Antiy-AVL	Trojan/Win32.Unknown
Microsoft	Worm:Win32/Tufik!pz
Xcitium	Virus.Win32.Tufik.NAA1@1lq7yb
Arcabit	Generic.Servstart.E.E170A49E
ZoneAlarm	Trojan-Dropper.Win32.Dinwod.rsj
GData	Generic.Servstart.E.E170A49E
Varist	W32/S-4ec753d4!Eldorado
AhnLab-V3	Dropper/Win.Dinwod.R439035
BitDefenderTheta	AI:Packer.39CF44811F
ALYac	Generic.Servstart.E.E170A49E
TACHYON	Virus/W32.Dinwod
VBA32	TrojanDownloader.Tiggre
Cylance	unsafe
TrendMicro-HouseCall	WORM_NITOL.SMB0
Rising	Backdoor.ServStart!1.B58A (CLASSIC)
Yandex	Win32.Perez.B
Ikarus	Virus.Win32.Tufik
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Tufik.AS
AVG	Win32:Tufik
CrowdStrike	win/malicious_confidence_100% (W)