Trojan

Trojan.VFlooder removal guide

Malware Removal

The Trojan.VFlooder is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.VFlooder virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is likely packed with VMProtect
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.VFlooder?


File Info:

name: 26693854A5DD192937DF.mlw
path: /opt/CAPEv2/storage/binaries/c96dc33452adf7f1096754b20b38087295880fc3eb2a263fd78e43812002895a
crc32: 89151459
md5: 26693854a5dd192937df49b1b18f86db
sha1: 51119add6417443deffc6ac7da5104a4c2b6846e
sha256: c96dc33452adf7f1096754b20b38087295880fc3eb2a263fd78e43812002895a
sha512: 66bc2647c511903f449fc0a36df3bea810932677a66850f2ac8b19ae0fb693a17112dc143ebe9d3da2ffed18bf0f10f03b72b7714879afc190b7a63cfb802e24
ssdeep: 3072:Wn2DChtXiMipT7uikIHpbXeIwQhlDS8FTJhZ7koY5G2SQWdz6xL+8:BotXouivJbOQNFTVb25WsL+8
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FFD30222BE7DCEF2F88717786D2B984EF92461104321EF5BD7802647AD46906A73C3E1
sha3_384: 24083c6d8678d4dc07fbaf462b1fd3e8ea7c6f65af0b1c4b6bb4037cebc813f79f007eeac8cd7287a09663009904034a
ep_bytes: e8b3bafffff5f8f8f6d2f99c6080ea0c
timestamp: 2014-06-25 22:58:59

Version Info:

0: [No Data]

Trojan.VFlooder also known as:

BkavW32.AgentATTc.Worm
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Agent.CBGS
FireEyeGeneric.mg.26693854a5dd1929
CAT-QuickHealTrojan.Mauvaise.SL1
ALYacTrojan.Agent.CBGS
MalwarebytesTrojan.VFlooder
ZillyaBackdoor.Agent.Win32.56544
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 0049c30b1 )
AlibabaTrojan:Win32/Vflooder.12e5
K7GWTrojan ( 0049c30b1 )
Cybereasonmalicious.4a5dd1
BaiduWin32.Trojan.Agent.atf
VirITTrojan.Win32.Agent4.BXTX
CyrenW32/S-65fab7c9!Eldorado
SymantecSMG.Heur!gen
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Agent.WBX
APEXMalicious
ClamAVWin.Malware.Byfh-6999008-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Agent.CBGS
NANO-AntivirusTrojan.Win32.dyljez.eaqekt
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
AvastWin32:TrojanX-gen [Trj]
TencentTrojan.Win32.Vflooder.wb
TACHYONTrojan/W32.Agent.131428.D
EmsisoftTrojan.Agent.CBGS (B)
F-SecureTrojan.TR/Agent.xwbc
DrWebBackDoor.Spy.2465
VIPRETrojan.Agent.CBGS
TrendMicroTROJ_VFLOODER_FC180244.UVPA
McAfee-GW-EditionBehavesLike.Win32.VFlooder.cc
Trapminemalicious.high.ml.score
SophosTroj/Agent-AHNL
IkarusTrojan.Win32.Vflooder
GDataWin32.Trojan.PSE.11NXXLN
JiangminTrojan.Generic.etfj
GoogleDetected
AviraTR/Agent.xwbc
Antiy-AVLTrojan/Win32.SGeneric
XcitiumTrojWare.Win32.Agent.WBX@5bs8lt
ArcabitTrojan.Agent.CBGS
ViRobotTrojan.Win32.Vtflooder.Gen.C
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftTrojan:Win32/Vindor!pz
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Agent.R162802
McAfeeTrojan-FHOD!26693854A5DD
MAXmalware (ai score=100)
VBA32TrojanSpy.Agent
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_VFLOODER_FC180244.UVPA
RisingTrojan.Agent!1.A403 (CLASSIC)
YandexTrojan.GenAsa!rmm3UX//DDE
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.7164915.susgen
FortinetW32/Agent.AHNL!tr
BitDefenderThetaGen:NN.ZexaF.36250.iGX@a8jG2og
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan.VFlooder?

Trojan.VFlooder removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment