Categories: Malware

PWS:Win32/Vidar.YB!MTB information

The PWS:Win32/Vidar.YB!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PWS:Win32/Vidar.YB!MTB virus can do?

A process attempted to delay the analysis task.
A process created a hidden window
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
Uses Windows utilities for basic functionality
Steals private information from local Internet browsers
Collects information about installed applications
Checks the CPU name from registry, possibly for anti-virtualization
Harvests credentials from local FTP client softwares
Harvests information related to installed instant messenger clients
Harvests information related to installed mail clients
Collects information to fingerprint the system
Uses suspicious command line tools or Windows utilities

Related domains:

xakfor.net

survey-smiles.com

ip-api.com

How to determine PWS:Win32/Vidar.YB!MTB?


File Info:
crc32: AA0950B3md5: ed1e5792000d46ce259f1921f014967dname: ED1E5792000D46CE259F1921F014967D.mlwsha1: 9e4d2aa15d2d6c61e3bebb0b5bd4d4c4d3f663fdsha256: 600552e69cace5f3ae996afd8c3376bd2bdd2d486e1fa7187587e197f25a86fasha512: c7a171a180960e993e752918a65687fe4f89edec7a4588cb670311c14682a62a017f37419de7ce2e7d4ef0b0dbe10b24c0f827ab9bd97d2714cec11e7bbc102bssdeep: 12288:DBaxwL7Yke3dHZmXJfMkz2zAJu+fpdHOyrSrvWlX3/m:Faa3reN5mXPKzAo0pkyrSrvWlOtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

PWS:Win32/Vidar.YB!MTB also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Stealer.25468
MicroWorld-eScan	Generic.SpyAgent.6.63D5A0A0
FireEye	Generic.mg.ed1e5792000d46ce
McAfee	GenericRXHD-PT!ED1E5792000D
Malwarebytes	Spyware.Vidar
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Virus_Suspicious.Win32.Sality.ae
K7AntiVirus	Password-Stealer ( 0053c3ab1 )
BitDefender	Generic.SpyAgent.6.63D5A0A0
K7GW	Password-Stealer ( 0053c3ab1 )
Cybereason	malicious.2000d4
BitDefenderTheta	Gen:NN.ZexaF.34590.ImW@aGiM@i
Cyren	W32/Vidar.A.gen!Eldorado
Symantec	Infostealer.Vidar
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
ClamAV	Win.Malware.Razy-6795329-0
Kaspersky	HEUR:Trojan.Win32.Generic
Alibaba	TrojanPSW:Win32/Vidar.5b4d44f7
NANO-Antivirus	Trojan.Win32.Stealer.fmiqzg
AegisLab	Trojan.Win32.Generic.4!c
Tencent	Malware.Win32.Gencirc.10b9a933
Ad-Aware	Generic.SpyAgent.6.63D5A0A0
Sophos	Mal/Generic-S
Comodo	Malware@#1129dsez9ykmt
F-Secure	Trojan.TR/AD.VidarStealer.awl
Zillya	Trojan.Agent.Win32.1325331
McAfee-GW-Edition	BehavesLike.Win32.Generic.hh
Emsisoft	Trojan-PSW.Tepfer (A)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.PSW.Tepfer.jbr
eGambit	Unsafe.AI_Score_99%
Avira	TR/AD.VidarStealer.awl
MAX	malware (ai score=100)
Antiy-AVL	Trojan[PSW]/Win32.Tepfer
Microsoft	PWS:Win32/Vidar.YB!MTB
Arcabit	Generic.SpyAgent.6.63D5A0A0
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Generic.SpyAgent.6.63D5A0A0
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.RL_Generic.R296259
VBA32	Trojan.Encoder
ALYac	Trojan.Downloader.568320A
Cylance	Unsafe
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/PSW.Agent.OGR
Rising	Stealer.Vidar!1.B80D (CLOUD)
Yandex	Trojan.GenAsa!9EVEKkASkXQ
Ikarus	Trojan-Spy.Vidar
MaxSecure	Trojan.Malware.7164915.susgen
Fortinet	W32/GenKryptik.DDSI!tr.pws
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_70% (D)
Qihoo-360	HEUR/QVM10.2.BFBF.Malware.Gen