Trojan

Should I remove “Trojan-Downloader.VB.NZX”?

Malware Removal

The Trojan-Downloader.VB.NZX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Downloader.VB.NZX virus can do?

  • Authenticode signature is invalid

How to determine Trojan-Downloader.VB.NZX?


File Info:

name: E7540DE39DD58A0F6EB5.mlw
path: /opt/CAPEv2/storage/binaries/50f0df6b5ed25e2756e4bbb620e4371a04495a4ed10d1e99f1471792af9a2f4d
crc32: ED5DC309
md5: e7540de39dd58a0f6eb5024e7659fa5a
sha1: c132f64fe64c3956e4b014dfdffa93f8446b9bde
sha256: 50f0df6b5ed25e2756e4bbb620e4371a04495a4ed10d1e99f1471792af9a2f4d
sha512: 585df90ae63de14aac3e86f7512fb029988c47b8ab52661884f88cca402a2178e5f09414bbe7b2ad2146e89f3fed1784ce88ac24d6646a2493b1a5a1f7c8a9d7
ssdeep: 768:4cEliTdOcAl+qOQSgFrhKo//WomvdfQXwYt1IEDIefZsK:nEIxbAcqOK3qowgnt1d
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T158631E63B6B35C4AD5C27EBA2B839DE60537A05D0F533661F2508B2DF629E20149BF43
sha3_384: 98943a53611b599e3503198cbad046021b10204c40a7b8780207e538a869f640688908fe20c6c4d5687c3fb1578049f2
ep_bytes: 68f4114000e8eeffffff000000000000
timestamp: 2009-06-17 14:24:34

Version Info:

Translation: 0x0409 0x04b0

Trojan-Downloader.VB.NZX also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
ClamAVWin.Trojan.VB-1042
CAT-QuickHealWorm.Datunif.A
SkyhighBehavesLike.Win32.VBObfus.km
ALYacGen:Trojan.Chinky.2
Cylanceunsafe
SangforSuspicious.Win32.Save.vb
K7AntiVirusEmailWorm ( 000dc83c1 )
BitDefenderGen:Trojan.Chinky.2
K7GWEmailWorm ( 000dc83c1 )
ArcabitTrojan.Chinky.2
BaiduWin32.Trojan.VB.q
VirITTrojan.Win32.VB.KF
SymantecW32.Changeup
tehtrisGeneric.Malware
ESET-NOD32Win32/TrojanDownloader.VB.NZX
APEXMalicious
CynetMalicious (score: 100)
KasperskyWorm.Win32.Basun.ajp
AlibabaTrojan:Win32/Starter.ali2000005
NANO-AntivirusTrojan.Win32.Basun.bakqn
ViRobotWorm.Win32.S.Basun.69632.FGG
MicroWorld-eScanGen:Trojan.Chinky.2
AvastWin32:AutoRun-AYY [Wrm]
TencentWorm.Win32.Basun.a
TACHYONTrojan/W32.VB-Agent.69632.AQ
EmsisoftGen:Trojan.Chinky.2 (B)
F-SecureTrojan.TR/Dropper.Gen
DrWebWin32.HLLW.Autoruner2.24570
ZillyaWorm.Basun.Win32.18780
TrendMicroWORM_VB.TOT
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.e7540de39dd58a0f
SophosW32/Datunif-A
JiangminWorm/Basun.abfu
WebrootW32.Obfuscated.Gen
GoogleDetected
AviraTR/Dropper.Gen
Antiy-AVLTrojan[Downloader]/Win32.VB
Kingsoftmalware.kb.a.1000
XcitiumWorm.Win32.Basun.ajp0@14jyik
MicrosoftWorm:Win32/Vobfus.F
SUPERAntiSpywareTrojan.Agent/Gen-NameThief[Smart]
ZoneAlarmWorm.Win32.Basun.ajp
GDataGen:Trojan.Chinky.2
VaristW32/VB.W.gen!Eldorado
AhnLab-V3Win32/Basun.worm.Gen
Acronissuspicious
McAfeeW32/VBNA.worm.gen.c
MAXmalware (ai score=100)
VBA32Trojan-Downloader.VB.NZX
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Downloader.WFP
TrendMicro-HouseCallWORM_VB.TOT
RisingTrojan.DL.Win32.VBcode.ij (CLASSIC)
YandexTrojan.GenAsa!9OBQBLME9hg
IkarusTrojan.VB.Inject
MaxSecureWorm.W32.Basun.ajp
FortinetW32/VBNA.G!tr
BitDefenderThetaAI:Packer.DD73FADD1F
AVGWin32:AutoRun-AYY [Wrm]
DeepInstinctMALICIOUS
alibabacloudTrojan

How to remove Trojan-Downloader.VB.NZX?

Trojan-Downloader.VB.NZX removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment