Categories: Trojan

Trojan.Win32.VBKrypt.yezz removal tips

The Trojan.Win32.VBKrypt.yezz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.VBKrypt.yezz virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
Unconventionial language used in binary resources: Spanish
Executed a process and injected code into it, probably while unpacking
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

deboydeboy.ddns.net

How to determine Trojan.Win32.VBKrypt.yezz?


File Info:
crc32: 2359385Bmd5: a6666b6fcb791745ab1eb1da9922fc43name: A6666B6FCB791745AB1EB1DA9922FC43.mlwsha1: 25a86bafe10e4f2760c867a86c82284f9d75f5e0sha256: 442bc40d493973a65c5fffa9d8a4f576e5075368ba23f04005777d6be4e4952esha512: 9b09d254618215ba75a94078d51258afb3f81a6181db389c29898f224c611ef985363a6e5d3f76e4290347b9183a761cbb51d40ff84f1b76b696e1059060507bssdeep: 3072:EzZmCrqP9PXVZ5qTV968wIFqt/KlWbazw1YXCn1J6Z0C6r4D/WzjIzPsQRhrFDN:EzZQ9dZ5qH6/Ik6zcYiMD/W3CVJtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x040a 0x04b0LegalCopyright: rjlisino rilisila InternalName: Callicarpa4FileVersion: 1.03.0007CompanyName: toricorm rbaLegalTrademarks: rilisino ralisili ProductName: Ueseqixosic ria. ProductVersion: 1.03.0007FileDescription: rahae rjtjea OriginalFilename: Callicarpa4.exe

Trojan.Win32.VBKrypt.yezz also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Heur.PonyStealer.Bm0@c4Kl0gM
McAfee	Packed-ST!A6666B6FCB79
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 00519add1 )
BitDefender	Gen:Heur.PonyStealer.Bm0@c4Kl0gM
K7GW	Trojan ( 00519add1 )
Cybereason	malicious.fcb791
TrendMicro	TSPY_HPFAREIT.SM1
Cyren	W32/VBInject.MN.gen!Eldorado
Symantec	Infostealer.Lokibot!12
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Tspy-6884469-0
Kaspersky	Trojan.Win32.VBKrypt.yezz
Rising	Trojan.Injector!8.C4 (TFE:4:8jcHxLR2ZqJ)
Ad-Aware	Gen:Heur.PonyStealer.Bm0@c4Kl0gM
Emsisoft	Trojan-PSW.Fareit (A)
F-Secure	Heuristic.HEUR/AGEN.1131148
DrWeb	Trojan.Remcos.2
Zillya	Trojan.VBKrypt.Win32.278869
Invincea	ML/PE-A + Mal/FareitVB-M
McAfee-GW-Edition	Packed-ST!A6666B6FCB79
MaxSecure	Trojan.Malware.1728101.susgen
FireEye	Generic.mg.a6666b6fcb791745
Sophos	Mal/FareitVB-M
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.VBKrypt.eibm
Avira	HEUR/AGEN.1131148
MAX	malware (ai score=87)
Antiy-AVL	Trojan/Win32.VBKrypt
Microsoft	VirTool:Win32/VBInject.PB!bit
Arcabit	Trojan.PonyStealer.E7DB8A
SUPERAntiSpyware	Trojan.Agent/Gen-VB
ZoneAlarm	Trojan.Win32.VBKrypt.yezz
GData	Gen:Heur.PonyStealer.Bm0@c4Kl0gM
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Inject.R210707
Acronis	suspicious
VBA32	TScope.Trojan.VB
ALYac	Gen:Heur.PonyStealer.Bm0@c4Kl0gM
Malwarebytes	Spyware.LokiBot
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Injector.DSQS
TrendMicro-HouseCall	TSPY_HPFAREIT.SM1
Yandex	Trojan.VBKrypt!pRgTxVnnQuc
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Injector.DSQN!tr
BitDefenderTheta	Gen:NN.ZevbaF.34634.Bm0@a4Kl0gM
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_90% (D)
Qihoo-360	HEUR/QVM03.0.3FBB.Malware.Gen