Home Malware Programs Viruses Virus:Win32/Expiro.BC

Virus:Win32/Expiro.BC

Posted: February 8, 2013

Threat Metric

Ranking: 13,314
Threat Level: 8/10
Infected PCs: 422
First Seen: February 8, 2013
Last Seen: September 7, 2023
OS(es) Affected: Windows

Virus:Win32/Expiro.BC is a virus that affects .EXE files in all drives (C: to Z:). Virus:Win32/Expiro.BC affects files by adding its malicious code as a section named '.vmp0' to the attacked file. Virus:Win32/Expiro.BC also gathers an affected PC user's credentials from a targeted computer and reduces Internet Explorer security. Virus:Win32/Expiro.BC may make lasting changes to the vulnerable computer's configuration that are NOT restored by detecting and removing this malware threat. Virus:Win32/Expiro.BC strives to steal personal information from victims to execute fraud. Once installed, Virus:Win32/Expiro.BC makes Ssystem changes by adding files with the extension .VIR. Virus:Win32/Expiro.BC may create a copy of the malicious file using the same file name but with the extension .VIR, which is deleted after some time. If Virus:Win32/Expiro.BC affects a protected file, it disables Windows File Protection to affect the file.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



UPDATER.EXE File name: UPDATER.EXE
Size: 758.27 KB (758272 bytes)
MD5: 9c67f74c9172117cdcaccf9f21c4f99b
Detection count: 92
File type: Executable File
Mime Type: unknown/EXE
Group: Malware file
Last Updated: August 12, 2013
file.exe File name: file.exe
Size: 1.06 MB (1069056 bytes)
MD5: a7485591fdb8fd33fb11ebea591a5a4b
Detection count: 73
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: January 6, 2014
17e8454d697566170def7c4371156aa8 File name: 17e8454d697566170def7c4371156aa8
Size: 4.83 MB (4832768 bytes)
MD5: 17e8454d697566170def7c4371156aa8
Detection count: 25
Group: Malware file
Last Updated: February 11, 2013
b3b354c2fb0c5d46bbd9c854a1cc7a08 File name: b3b354c2fb0c5d46bbd9c854a1cc7a08
Size: 888.83 KB (888832 bytes)
MD5: b3b354c2fb0c5d46bbd9c854a1cc7a08
Detection count: 24
Group: Malware file
Last Updated: February 11, 2013
foo.vir File name: foo.vir
Mime Type: unknown/vir
Group: Malware file

Additional Information

The following URL's were detected:
{ec9032c7-c20a-464f-7b0e-13a3a9e97385}
Loading...