Trojan.Win32.VBKrypt.uuvz malicious file

The Trojan.Win32.VBKrypt.uuvz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.VBKrypt.uuvz virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Authenticode signature is invalid
• Behavioural detection: Injection (Process Hollowing)
• Executed a process and injected code into it, probably while unpacking
• Behavioural detection: Injection (inter-process)
• Tries to unhook or modify Windows functions monitored by Cuckoo

How to determine Trojan.Win32.VBKrypt.uuvz?

File Info:
name: 911C03F9A8F5B03A588A.mlw
path: /opt/CAPEv2/storage/binaries/aee2c2da891c866d15eb9db58c7347b9ff1348652f7efb0f494b3503ea1c4069
crc32: 56ACFFE3
md5: 911c03f9a8f5b03a588adf7845d5ec7e
sha1: 732ff079490ae2bb4cce2d48aeb802bc1576e874
sha256: aee2c2da891c866d15eb9db58c7347b9ff1348652f7efb0f494b3503ea1c4069
sha512: dc088ec398890e0b820fd60dfe2f77f480a881fe65aaa4fe47ccd08d1a177c6a60f3c4767e0fd78e4843aa098a53d836b480d7a55dd96f6b63fd6e01b10489d6
ssdeep: 6144:ETRUTV5ntxcx8J5uybal9CD8bjVa/1OjUYUAAgyrsPW:ERUTV5ntqxKMybZqjQ/9YUAL7W
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T141341253830FC4D8ED1452F8A8724E5356A3AF6B648B06410DA57A9BF6F859F48FAC30
sha3_384: ae9856cca0b0a8a34dd1a51c5dcff22779f06554c998718dedc3eac3a0f32c1e04979b87d27f284359b1773562b60a7c
ep_bytes: 6a286870204000e87402000033ff57ff
timestamp: 2010-03-30 22:11:32

Version Info:
0: [No Data]

Trojan.Win32.VBKrypt.uuvz also known as:

How to remove Trojan.Win32.VBKrypt.uuvz?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.