Should I remove "Trojan.Win32.Eb.blc"?

The Trojan.Win32.Eb.blc is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Eb.blc virus can do?

Executable code extraction
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
A process attempted to delay the analysis task.
Expresses interest in specific running processes
Unconventionial language used in binary resources: Serbian
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Checks the CPU name from registry, possibly for anti-virtualization
Collects information to fingerprint the system
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Win32.Eb.blc?


File Info:
crc32: B489A0F3
md5: 91b3980122674e76cf1811543cc07b6f
name: 91B3980122674E76CF1811543CC07B6F.mlw
sha1: 274fe406ea88b7181a3e6e34e3c66105dfd2a54d
sha256: 8f6989bc9d78f70555d161ba4260355118ffde9b1c934d2839927f9e5bfa1c62
sha512: df3d0f35f24b7b4c9ebf562db46439310b8c058efc9aef18b75992ab191d456a8421b2e165697ec14f66a2ee0bf97853bb7eb01b7fdbcfe4e9923bfa6f31b329
ssdeep: 98304:x5egS0f2+62jvzFNmZRC2odoGZP1J7uu5ccSgE+0dnzNuE7J1Hi+FyaKbI9vWzn:Te+6izFW8dPb35ZSg0Z5uElh3qp6DQu
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:
InternalName: triwilbifor.occ
FileVersion: 6.26.361
Copyright: Copyrighz (C) 2020, wodkafull
ProductVersion: 1.0.16
TranslationUsa: 0x0273 0x0080

Trojan.Win32.Eb.blc also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.45371836
FireEye	Generic.mg.91b3980122674e76
CAT-QuickHeal	Trojan.Multi
ALYac	Trojan.GenericKD.45371836
Cylance	Unsafe
K7AntiVirus	Trojan ( 00575cf71 )
BitDefender	Trojan.GenericKD.45371836
K7GW	Trojan ( 00575cf71 )
Cybereason	malicious.6ea88b
BitDefenderTheta	Gen:NN.ZexaF.34760.@pKfayorC4pG
Cyren	W32/Trojan.KMHF-3951
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R023C0DAA21
Paloalto	generic.ml
Kaspersky	Trojan.Win32.Eb.blc
Alibaba	Trojan:Win32/Azorult.0efdf459
ViRobot	Trojan.Win32.Z.Agent.4443648.B
Tencent	Win32.Trojan.Kryptik.Htbv
Ad-Aware	Trojan.GenericKD.45371836
Emsisoft	Trojan.GenericKD.45371836 (B)
F-Secure	Trojan.TR/AD.GoCloudnet.cql
McAfee-GW-Edition	BehavesLike.Win32.Generic.rc
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Crypt
eGambit	Unsafe.AI_Score_99%
Avira	TR/AD.GoCloudnet.cql
MAX	malware (ai score=82)
Kingsoft	Win32.Troj.Eb.b.(kcloud)
Microsoft	Trojan:Win32/Azorult.MR!MTB
Gridinsoft	Trojan.Win32.Packed.oa
Arcabit	Trojan.Generic.D2B451BC
AegisLab	Trojan.Multi.Generic.4!c
ZoneAlarm	Trojan.Win32.Eb.blc
GData	Trojan.GenericKD.45371836
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.C4296252
Acronis	suspicious
McAfee	GenericRXAA-AA!91B398012267
VBA32	Trojan.Eb
Malwarebytes	Trojan.MalPack.GS
Panda	Trj/RnkBend.A
ESET-NOD32	a variant of Win32/Kryptik.HIPJ
Rising	Trojan.Kryptik!1.CFEE (CLASSIC)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Kryptik.HIRY!tr
Webroot	W32.Trojan.Gen
AVG	Win32:PWSX-gen [Trj]
Avast	Win32:PWSX-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	Generic/HEUR/QVM11.1.71E9.Malware.Gen

How to remove Trojan.Win32.Eb.blc?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “Trojan.Win32.Eb.blc”?