Trojan

About “Trojan.VBRA.06010” infection

Malware Removal

The Trojan.VBRA.06010 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.VBRA.06010 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • A process attempted to delay the analysis task.
  • Expresses interest in specific running processes
  • Reads data out of its own binary image
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Creates a slightly modified copy of itself
  • Anomalous binary characteristics
  • Attempts to modify Explorer settings to prevent hidden files from being displayed

Related domains:

ns1.player1253.com
ns1.videoall.net
ns1.mediashares.org

How to determine Trojan.VBRA.06010?


File Info:

crc32: D5651D4D
md5: dbb8ee91e8bc2f928e8a1390bdc6e9ec
name: DBB8EE91E8BC2F928E8A1390BDC6E9EC.mlw
sha1: ab9e7657cf09aeff4332edae68321aa7a8f0c5de
sha256: d7ea2e6459e39178eb76858d07f733a5e9a7bb4e210407d2e1da26d1ec698537
sha512: 0c43ad7ddfc7c67544af11c5502b290a812c98efb8b33b72b6643079249b6383c72b4def526903ca2fc7ed9fbd5e565a51722422a31a549f5f445e12819b3cab
ssdeep: 3072:TPyldGj/tm1VNDL0L/RSRDIy5lb5zGdG:TKdGMscUy5HH
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
InternalName: UbPnr372
FileVersion: 6.42
CompanyName: UbPnr372
ProductName: UbPnr8354
ProductVersion: 6.42
OriginalFilename: UbPnr372.exe

Trojan.VBRA.06010 also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
DrWebWin32.HLLW.Autoruner.42119
MicroWorld-eScanGen:Variant.VBKrypt.23
FireEyeGeneric.mg.dbb8ee91e8bc2f92
Qihoo-360HEUR/QVM03.0.08CB.Malware.Gen
McAfeeDownloader-CJX.gen.o
CylanceUnsafe
VIPRETrojan.Win32.Vobfus.a (v)
SangforMalware
K7AntiVirusTrojan-Downloader ( 001ff72a1 )
BitDefenderGen:Variant.VBKrypt.23
K7GWTrojan-Downloader ( 001ff72a1 )
Cybereasonmalicious.1e8bc2
BitDefenderThetaAI:Packer.F9D8759420
CyrenW32/VB.BR.gen!Eldorado
SymantecW32.Changeup!gen10
TotalDefenseWin32/Vobfus.I!generic
APEXMalicious
AvastWin32:Downloader-FDN [Trj]
ClamAVWin.Trojan.Changeup-6169544-0
KasperskyWorm.Win32.Vobfus.djot
NANO-AntivirusTrojan.Win32.Autoruner.coonkc
ViRobotTrojan.Win32.A.VBKrypt.253952.DR
RisingWorm.Agent!1.D163 (CLASSIC)
Ad-AwareGen:Variant.VBKrypt.23
SophosML/PE-A + Mal/SillyFDC-I
ComodoWorm.Win32.VB.YK@4on4m7
F-SecureTrojan.TR/Dropper.Gen
BaiduWin32.Worm.AutoRun.cj
TrendMicroWORM_VBNA.SMTB
McAfee-GW-EditionBehavesLike.Win32.VBObfus.dm
EmsisoftGen:Variant.VBKrypt.23 (B)
IkarusWorm.Win32.VBNA
AviraTR/Dropper.Gen
MAXmalware (ai score=80)
Antiy-AVLWorm/Win32.WBNA.gen
MicrosoftWorm:Win32/Vobfus.gen!E
ArcabitTrojan.VBKrypt.23
SUPERAntiSpywareTrojan.Agent/Gen-Downloader
ZoneAlarmWorm.Win32.Vobfus.djot
GDataGen:Variant.VBKrypt.23
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.VBKrypt.R2546
Acronissuspicious
VBA32Trojan.VBRA.06010
ALYacGen:Variant.VBKrypt.23
TACHYONWorm/W32.Vobfus.253952.B
MalwarebytesVobfus.Worm.Evasion.DDS
PandaTrj/Genetic.gen
ESET-NOD32Win32/AutoRun.VB.YK
TrendMicro-HouseCallWORM_VBNA.SMTB
YandexTrojan.GenAsa!kzGc1bM1Y3c
SentinelOneStatic AI – Malicious PE – Worm
eGambitUnsafe.AI_Score_99%
FortinetW32/AutoRun.XM!worm
AVGWin32:Downloader-FDN [Trj]
CrowdStrikewin/malicious_confidence_100% (D)
MaxSecureTrojan.Malware.300983.susgen

How to remove Trojan.VBRA.06010?

Trojan.VBRA.06010 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment