Trojan

Should I remove “Trojan.Win32.VBKrypt.vyde”?

Malware Removal

The Trojan.Win32.VBKrypt.vyde is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.VBKrypt.vyde virus can do?

  • Executable code extraction
  • Possible date expiration check, exits too soon after checking local time
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Installs itself for autorun at Windows startup
  • Writes a potential ransom message to disk
  • Network activity detected but not expressed in API logs

How to determine Trojan.Win32.VBKrypt.vyde?


File Info:

crc32: 4C30452C
md5: 3f391e2c3e5d6098252b5b819bcb1158
name: 3F391E2C3E5D6098252B5B819BCB1158.mlw
sha1: 60cb48fd44a81a246f3407ba923b2b94ba2228ce
sha256: d844de3114e1dd5a34809f8d3f399ab2ac452963c9eac79892baec57511ae2fb
sha512: 2ddff3259bbe73689d694f143088246974b741df2eec8eccb79d5635192b68d6c13964323735de33e63524a528344704051b6c6663701ef202eec75d81988d2f
ssdeep: 12288:jriji3bhb/6irHLc9Y8+3Br0qqmbrnFeObwhVhukmR+QgZQ:HV3bh/tHLMY1r0wRRbahuym
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Trojan.Win32.VBKrypt.vyde also known as:

BkavW32.AIDetect.malware2
K7AntiVirusRiskware ( 0040eff71 )
LionicTrojan.Win32.VBKrypt.4!c
DrWebBACKDOOR.Trojan
AlibabaTrojan:Win32/VBKrypt.d0f65c00
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.c3e5d6
AvastWin32:Malware-gen
ClamAVWin.Ransomware.Cryptor-9848859-0
KasperskyTrojan.Win32.VBKrypt.vyde
TencentWin32.Trojan.Vbkrypt.Llrl
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Dropper.hc
eGambitUnsafe.AI_Score_99%
McAfeeArtemis!3F391E2C3E5D
VBA32BScope.TrojanRansom.Blocker
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Worm.VBKrypt.HgIASYsA

How to remove Trojan.Win32.VBKrypt.vyde?

Trojan.Win32.VBKrypt.vyde removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment