Threat Database Viruses Virus:Win32/Expiro.BC


By JubileeX in Viruses

Threat Scorecard

Ranking: 12,111
Threat Level: 80 % (High)
Infected Computers: 180
First Seen: February 8, 2013
Last Seen: September 7, 2023
OS(es) Affected: Windows

Virus:Win32/Expiro.BC is a virus that corrupts .EXE files in all drives (C: to Z:). Virus:Win32/Expiro.BC corrupts files by adding its harmful code as a section called '.vmp0' to the affected file. Virus:Win32/Expiro.BC also collects a victim's credentials from a compromised PC and decreases security of Internet Explorer. Virus:Win32/Expiro.BC may make continuous modifications to the infected computer's configuration that are NOT restored by finding and uninstalling this malware infection. Virus:Win32/Expiro.BC aims at stealing confidential information from affected PC users to perform fraud. When installed, Virus:Win32/Expiro.BC makes system changes by downloading files with the .VIR extension. Virus:Win32/Expiro.BC may create a copy of the harmful file using the same file name but with the extension .VIR, which is later erased. If Virus:Win32/Expiro.BC corrupts a secured file, it disables Windows File Protection to corrupt the file.

SpyHunter Detects & Remove Virus:Win32/Expiro.BC

File System Details

Virus:Win32/Expiro.BC may create the following file(s):
# File Name MD5 Detections
1. foo.vir
2. b3b354c2fb0c5d46bbd9c854a1cc7a08 b3b354c2fb0c5d46bbd9c854a1cc7a08 0
3. 17e8454d697566170def7c4371156aa8 17e8454d697566170def7c4371156aa8 0
4. UPDATER.EXE 9c67f74c9172117cdcaccf9f21c4f99b 0
5. file.exe a7485591fdb8fd33fb11ebea591a5a4b 0


Virus:Win32/Expiro.BC may call the following URLs:



Most Viewed