Trojan.Win32.VBKrypt.otct (file analysis)

The Trojan.Win32.VBKrypt.otct is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.VBKrypt.otct virus can do?

• Reads data out of its own binary image
• Drops a binary and executes it
• Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
• Network activity detected but not expressed in API logs
• Anomalous binary characteristics

How to determine Trojan.Win32.VBKrypt.otct?

File Info:
crc32: 5DA8D536
md5: 55ae7aedee05a021afbca906916a0447
name: kclock.exe
sha1: b78fa16a1f2943b8d24324a2dbd6b1ac8ecc5110
sha256: d52d05acdae88ca9d872b071e21a0e18cfada59b54cf7697c294bc8d9974ec20
sha512: 4fdb547f89cad669e418eca9a13e3ec472ce6ce8f104da9ea8356ac1d2337528f8a7a40d2149ce8e15a0766b4e510782bf60b69a76debf60e0262f6045fb0ef8
ssdeep: 49152:Q0HbjlP1EqwKuaE3fD7/0utuhaoLyVY703U:Q0HbjJaqavvH/0QO9L2c0E
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2000 Indigo Rose Corporation
InternalName: setup
FileVersion: 5.0.1.4
CompanyName: Indigo Rose Corporation http://www.indigorose.com
PrivateBuild: 
LegalTrademarks: Setup Factory is a trademark of Indigo Rose Corporation.
Comments: This setup code is the property of Indigo Rose Corporation
ProductName: setup
SpecialBuild: 
ProductVersion: 5.0.1.4
FileDescription: Setup Factory setup launcher
OriginalFilename: setup.exe
Translation: 0x0409 0x04e4

Trojan.Win32.VBKrypt.otct also known as:

How to remove Trojan.Win32.VBKrypt.otct?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.