Trojan.VBRA.02615 (file analysis)

The Trojan.VBRA.02615 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.VBRA.02615 virus can do?

• Unconventionial language used in binary resources: Chinese (Traditional)
• Executable file is packed/obfuscated with ASPack
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Anomalous binary characteristics

How to determine Trojan.VBRA.02615?

File Info:
name: 57FA27256FEC8FEBBC70.mlw
path: /opt/CAPEv2/storage/binaries/ce7ae2d5dc0b66b8a8a02cc8a6c48ac62b8608dbddeb9f02037fbf129740d58b
crc32: A3254255
md5: 57fa27256fec8febbc70d8f4872ec8a7
sha1: 1a9bb19cd954f56a05cceab8975412e244afe26f
sha256: ce7ae2d5dc0b66b8a8a02cc8a6c48ac62b8608dbddeb9f02037fbf129740d58b
sha512: f811b7ae851a3af3b7595820afbc03049f8f2f71160b5a351e55044e85a010830096ca70c48fd4aa2a131db2782e34d7f5b1451cfa78c367c6965f2fb930bc1e
ssdeep: 3072:+Wi/hMiDy8FLeGl3zuNvqEWarIyf0cV6m0FkDBGR2xorHSKR:piZtr56NvqEnNLVBacB9yry
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C004127A6A694F32C7F51CB185963A837180D5D2FAF41F67AA6223CF0636C074E43762
sha3_384: 9b3bb4f0177671b92088905e73e1b7f930240743b83ab2754ac40ddaa0f2b7e198b65723d73f4c51db1db4b38f0200ab
ep_bytes: 60e93d040000e924040001eb00bb3139
timestamp: 2001-07-30 10:13:51

Version Info:
Translation: 0x0404 0x04b0
CompanyName: CHEN PROGRAM STUDY
LegalTrademarks: CPS
ProductName: 收服寶貝
FileVersion: 1.00
ProductVersion: 1.00
InternalName: baby
OriginalFilename: baby.exe

Trojan.VBRA.02615 also known as:

How to remove Trojan.VBRA.02615?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.