Malware

Troj/VBinj-YK removal tips

Malware Removal

The Troj/VBinj-YK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Troj/VBinj-YK virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Behavioural detection: Injection (inter-process)
  • CAPE detected the embedded pe malware family
  • Attempts to disable Windows Auto Updates
  • Attempts to modify Explorer settings to prevent hidden files from being displayed
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Troj/VBinj-YK?


File Info:

name: FF868450C7B725CB528C.mlw
path: /opt/CAPEv2/storage/binaries/c0b289ece4c2bf0cabc579c2f37f8f323afd242e7a9f5c83f724f6a9e3b9b95a
crc32: DBE08A37
md5: ff868450c7b725cb528ca992ded64f6e
sha1: 7141e6af1fcd889d02aa4850e3b8e4ce3bb4d116
sha256: c0b289ece4c2bf0cabc579c2f37f8f323afd242e7a9f5c83f724f6a9e3b9b95a
sha512: a16fa9714d07d43d45ca6c7251be9263e4ea672b3612b042c2bcc25abf75d882520f80db1a4503fab00d36fe5a81e7c82a2dae25f1328420bff20850ba48c1fa
ssdeep: 3072:oyYtvy0tQ9nLHbB9WJvA7DejJuKvEhfm:b4QxL7B9WSvejJuB
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C934E4937F36B445F96569306CFB86FA7783F84C4A0701475B30222A9EDBE722D24693
sha3_384: 39786b1c83bb0b4c13fbb0b60a0812ecfaa2dccffbcf6492f21f3359f8640f18cfbad8960be1584adc540bd9fbc2c429
ep_bytes: 6824124000e8eeffffff000000000000
timestamp: 2002-06-21 10:26:09

Version Info:

0: [No Data]

Troj/VBinj-YK also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Dacic.4!c
Elasticmalicious (high confidence)
DrWebWin32.HLLW.Autoruner1.15097
MicroWorld-eScanGeneric.Dacic.0B66ABC5.A.E5EF630E
FireEyeGeneric.mg.ff868450c7b725cb
CAT-QuickHealTrojan.Beebone.D
SkyhighBehavesLike.Win32.VBObfus.dt
McAfeeVBObfus.dv
Cylanceunsafe
ZillyaTrojan.VB.Win32.1813901
SangforSuspicious.Win32.Save.vb
K7AntiVirusEmailWorm ( 0054d10f1 )
AlibabaWorm:Win32/VBInject.3346
K7GWEmailWorm ( 0054d10f1 )
BitDefenderThetaGen:NN.ZevbaF.36804.pqZ@aW6Pgvm
VirITTrojan.Win32.Cryptor.H
SymantecW32.Changeup
ESET-NOD32Win32/AutoRun.VB.AVF
APEXMalicious
TrendMicro-HouseCallTROJ_AGENT_037768.TOMB
AvastWin32:VB-ADDH [Trj]
ClamAVWin.Trojan.Acnu-7601993-0
KasperskyTrojan.Win32.VB.budw
BitDefenderGeneric.Dacic.0B66ABC5.A.E5EF630E
NANO-AntivirusTrojan.Win32.VB.rilpg
TencentTrojan.Win32.Vb.wb
EmsisoftGeneric.Dacic.0B66ABC5.A.E5EF630E (B)
F-SecureTrojan.TR/Dropper.Gen
BaiduWin32.Worm.VB.mf
VIPREGeneric.Dacic.0B66ABC5.A.E5EF630E
TrendMicroTROJ_AGENT_037768.TOMB
Trapminemalicious.high.ml.score
SophosTroj/VBinj-YK
Paloaltogeneric.ml
MAXmalware (ai score=80)
JiangminTrojan/VB.clfr
GoogleDetected
AviraTR/Dropper.Gen
VaristW32/Agent.GOO.gen!Eldorado
Antiy-AVLVirus/Win64.Expiro.rsrc
KingsoftWin32.Trojan.VB.budw
MicrosoftPWS:Win32/Fareit!pz
XcitiumTrojWare.Win32.VB.AVF@4ol6o1
ArcabitGeneric.Dacic.0B66ABC5.A.E5EF630E
ViRobotTrojan.Win32.A.VB.200704.H
ZoneAlarmTrojan.Win32.VB.budw
GDataWin32.Trojan.PSE1.ARBXVV
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.VB.R560502
Acronissuspicious
ALYacGeneric.Dacic.0B66ABC5.A.E5EF630E
TACHYONTrojan/W32.VB-Agent.245760.BS
VBA32SScope.Malware-Cryptor.VBCR.3042
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
RisingWorm.Pronny!1.E3E8 (CLASSIC)
YandexTrojan.GenAsa!dMYWIGcmXQw
IkarusWorm.Win32.AutoRun
FortinetW32/VBObfus.AU!tr
AVGWin32:VB-ADDH [Trj]
DeepInstinctMALICIOUS
alibabacloudTrojan[dropper]:Win/Fareit

How to remove Troj/VBinj-YK?

Troj/VBinj-YK removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment