Backdoor.VanillaRat removal instruction

The Backdoor.VanillaRat is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.VanillaRat virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Backdoor.VanillaRat?


File Info:
crc32: 2722957C
md5: 341e5d06fdd37df056760343ffb03b1e
name: 341E5D06FDD37DF056760343FFB03B1E.mlw
sha1: 5c8838f9403fcaed04163d523e93eec885fc2721
sha256: 82f62f93e0fb9ee10eee1349be743b075c1e9db58cfc358231640788ff9b5e48
sha512: 55e510fc4cc0ff47d2619e0aab6c028af4857bae55fcb7e110d1ff19825e41d116d01e0bbe733f5c98a92f451f6400e013254cfcbf68b5d84dc1c1d90b17a66a
ssdeep: 3072:0SpIUJS7cnQlEMXu03UJE+fKPHfmbu7DALtyTMQ:zOUJZQlR33CE+fk3E0
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: 8uahfos873e4fho
Assembly Version: 156.23.15.48
InternalName: VanillaStub.exe
FileVersion: 95.31.45.20
CompanyName: 89seghf9sudfj98
LegalTrademarks: o8as7ehfo83
Comments: sdfugohe4987gw
ProductName: uhsuifhs8e7hf3
ProductVersion: 95.31.45.20
FileDescription: AIusohciuwheofiu
OriginalFilename: VanillaStub.exe

Backdoor.VanillaRat also known as:

Elastic	malicious (high confidence)
ClamAV	Win.Malware.Razy-9790647-0
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
ALYac	Generic.MSIL.Blocker.1.71ECD191
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Alibaba	Ransom:MSIL/Blocker.d3759da5
K7GW	Trojan ( 0054dc401 )
K7AntiVirus	Trojan ( 0054dc401 )
ESET-NOD32	a variant of MSIL/Agent.BYD
APEX	Malicious
Avast	Win32:RATX-gen [Trj]
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan-Ransom.MSIL.Blocker.gen
BitDefender	Generic.MSIL.Blocker.1.71ECD191
MicroWorld-eScan	Generic.MSIL.Blocker.1.71ECD191
Tencent	Msil.Trojan.Blocker.Lgtq
Ad-Aware	Generic.MSIL.Blocker.1.71ECD191
Comodo	Malware@#3qdn1vo2dhigo
F-Secure	Heuristic.HEUR/AGEN.1126350
BitDefenderTheta	Gen:NN.ZemsilF.34088.hm0@a0yQ!ip
VIPRE	Trojan.Win32.Generic!BT
FireEye	Generic.mg.341e5d06fdd37df0
Emsisoft	Generic.MSIL.Blocker.1.71ECD191 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.MSIL.pcap
Avira	HEUR/AGEN.1126350
Antiy-AVL	Trojan/Generic.ASMalwS.3093F51
Microsoft	Trojan:Win32/Laqma
Arcabit	Generic.MSIL.Blocker.1.71ECD191
GData	Generic.MSIL.Blocker.1.71ECD191
AhnLab-V3	Malware/Win32.RL_Generic.C4147681
McAfee	Artemis!341E5D06FDD3
MAX	malware (ai score=85)
Malwarebytes	Backdoor.VanillaRat
Rising	Backdoor.VanillaRAT!1.C9D1 (CLASSIC)
Ikarus	Backdoor.Quasar
MaxSecure	Trojan.Malware.73689294.susgen
Fortinet	MSIL/Agent.BYD!tr
AVG	Win32:RATX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Blocker.HgIASOUA

How to remove Backdoor.VanillaRat?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Backdoor.VanillaRat removal instruction