Categories: Trojan

Trojan.VB.NMQ removal instruction

The Trojan.VB.NMQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.VB.NMQ virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan.VB.NMQ?


File Info:
name: 4EDA414574FFEC52E986.mlwpath: /opt/CAPEv2/storage/binaries/5690693744257ed1aef15ea5e5ef9bed95bc006d8f0b9f308fa1d24e7cbb1d8ecrc32: 1F6D96F9md5: 4eda414574ffec52e9867901bf9b5a79sha1: 5d0dcbce80575fd055e5f407dfc6282d1b472488sha256: 5690693744257ed1aef15ea5e5ef9bed95bc006d8f0b9f308fa1d24e7cbb1d8esha512: 14a0051c22dfeae6caaf4620a5ca84e5523fcffeb7c93a944e560e30b87f9298eedd38e0eb796a03895f9b2fd7d964b2a720b636be2a66032b675582963c7951ssdeep: 768:qZVy+DZ4mV+RMO2rhgFwuqCbxTGy/BBGg4NKhLU4dhbDW2+Kv00dX0vN0TlT+XyJ:oamlu3hbBGy3G8nhMpmtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T17C730923A3C58986EE5B6A787783C5E241A7B95D5F071C06B34C23AC1B31F536C2CA67sha3_384: 2418658f0b4e753352fdd4a0c23d2d4f5f81b07ada77229325bce12e45f63a81a9c6e03f1415e5db7a532ee38987e21fep_bytes: 6840124000e8eeffffff000000000000timestamp: 2007-08-31 06:32:13
Version Info:
Translation: 0x0409 0x04b0CompanyName: Microsoft CorporationFileDescription: disktoastFileVersion: 10.0.15063.1475 (WinBuild.160101.0800)InternalName: disktoastLegalCopyright: ©

Trojan.VB.NMQ also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
DrWeb	Win32.HLLW.VBNA.based
MicroWorld-eScan	Trojan.VB.NMQ
CAT-QuickHeal	Trojan.JorikMF.S18371374
Skyhigh	BehavesLike.Win32.Azero.lm
ALYac	Trojan.VB.NMQ
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Downloader.VB.Win32.44
Sangfor	Suspicious.Win32.Save.vb
K7AntiVirus	Trojan ( 00100eb21 )
K7GW	Trojan ( 00100eb21 )
Cybereason	malicious.e80575
Arcabit	Trojan.VB.NMQ
BitDefenderTheta	AI:Packer.0EF7DBAA1F
VirIT	Trojan.Win32.Generic.EYV
Symantec	Downloader
tehtris	Generic.Malware
ESET-NOD32	Win32/Azero.B
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Trojan.VB-990
Kaspersky	Trojan.Win32.Jorik.Vobfus.gvos
BitDefender	Trojan.VB.NMQ
NANO-Antivirus	Trojan.Win32.VB.bvrcv
Avast	Win32:VB-ITN [Trj]
Tencent	Trojan.Win32.DL.acn
Emsisoft	Trojan.VB.NMQ (B)
F-Secure	Virus:W32/Varp.gen!D
Baidu	Win32.Trojan.Azero.b
VIPRE	Trojan.VB.NMQ
TrendMicro	PE_VB.B-O
FireEye	Generic.mg.4eda414574ffec52
Sophos	Troj/Dldr-Q
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanDownloader.Tolsty.h
Varist	W32/Downloader.YLML-0042
Avira	TR/Drop.Fakedoc.bsq
MAX	malware (ai score=85)
Antiy-AVL	Trojan[Downloader]/Win32.Tolsty
Kingsoft	malware.kb.a.1000
Xcitium	TrojWare.Win32.TrojanDownloader.VB.~WW@96elu
Microsoft	TrojanDownloader:Win32/VB
ViRobot	Trojan.Win32.Downloader.77828
ZoneAlarm	Trojan.Win32.Jorik.Vobfus.gvos
GData	Win32.Trojan.PSE1.2LY902
Google	Detected
AhnLab-V3	Downloader/Win32.VB.R1289
McAfee	W32/Azero.a
TACHYON	Trojan/W32.VB-Jorik.77828
VBA32	Trojan.VBRA.010045
Cylance	unsafe
Panda	W32/Azero.B
TrendMicro-HouseCall	PE_VB.B-O
Rising	Trojan.Win32.VB.zyj (CLASSIC)
Ikarus	Trojan-Downloader.Win32.VB
MaxSecure	Downloader.VB.itl
Fortinet	W32/Azero.A
AVG	Win32:VB-ITN [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)