Spy Trojan

How to remove “Trojan.Spy.VB.NFW”?

Malware Removal

The Trojan.Spy.VB.NFW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Spy.VB.NFW virus can do?

  • Executable code extraction
  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Spy.VB.NFW?


File Info:

crc32: 6BA66BDE
md5: 372b112040860dddf2686b28aa46d6ee
name: 372B112040860DDDF2686B28AA46D6EE.mlw
sha1: cc3e3304195c7b1488ebc67a8cdab60d03fc1d30
sha256: 0a97c5ec4c011e5e69559b83705c5588cfb1a41c4f74f5456babb572da8d3619
sha512: 1524f69d67b1d8b19aea648794cf3c7a2b7b6ac0734b02468e56e7719a0b8e8381c7862b291f8e354ad208c5fbb5bf2b991004512d961f622ea9aedf45853dea
ssdeep: 1536:EroaOb13fgGGyychpswY4cU55njuei9FqMtXW5Cjab4VsFfX:P3fgGdychpswY41TjTi9cMU5wsFP
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
LegalCopyright: Copyright 2008-2009
InternalName: iexplorer
FileVersion: 4.04.0001
LegalTrademarks: Trademark(TM) 2009
Comments: Internet Network.
ProductName: MSN
ProductVersion: 4.04.0001
OriginalFilename: iexplorer.exe

Trojan.Spy.VB.NFW also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 005323041 )
Elasticmalicious (high confidence)
DrWebBackDoor.Generic.1662
CynetMalicious (score: 99)
ALYacTrojan.Spy.VB.NFW
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (D)
AlibabaRansom:Win32/Blocker.61cc5c38
K7GWTrojan ( 005323041 )
Cybereasonmalicious.040860
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan-Ransom.Win32.Blocker.hgdj
BitDefenderTrojan.Spy.VB.NFW
NANO-AntivirusTrojan.Win32.VB.ulnv
MicroWorld-eScanTrojan.Spy.VB.NFW
TencentWin32.Trojan.Blocker.Ligx
Ad-AwareTrojan.Spy.VB.NFW
SophosMal/Generic-S
ComodoMalware@#3i75sftn5hhie
F-SecureTrojan.TR/VB.Downloader.Gen
BitDefenderThetaAI:Packer.DC7870BF1C
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.VBObfus.cm
FireEyeGeneric.mg.372b112040860ddd
EmsisoftTrojan.Spy.VB.NFW (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Blocker.qah
AviraTR/VB.Downloader.Gen
eGambitGeneric.PSW
Antiy-AVLTrojan[Spy]/Win32.VB
KingsoftWin32.Heur.KVM006.a.(kcloud)
MicrosoftTrojan:Win32/Occamy.C
ArcabitTrojan.Spy.VB.NFW
AegisLabTrojan.Win32.VB.l!c
ZoneAlarmTrojan-Ransom.Win32.Blocker.hgdj
GDataTrojan.Spy.VB.NFW
AhnLab-V3Spyware/Win32.VB.C208316
McAfeeArtemis!372B11204086
MAXmalware (ai score=99)
VBA32TrojanSpy.VB
MalwarebytesGeneric.Malware/Suspicious
PandaTrj/Genetic.gen
RisingRansom.Blocker!8.12A (CLOUD)
YandexTrojanSpy.VB!QqscW3XNCP8
IkarusTrojan-Spy.Win32.VB
MaxSecureTrojan.Malware.73930316.susgen
FortinetW32/VB.ATP!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan.Spy.VB.NFW?

Trojan.Spy.VB.NFW removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment