Categories: Trojan

How to remove “Trojan.Win32.Vilsel.drmu”?

The Trojan.Win32.Vilsel.drmu is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Vilsel.drmu virus can do?

Uses Windows utilities for basic functionality
Modifies host OEM information
The binary likely contains encrypted or compressed data.
Removes Security and Maintenance icon from Start menu, Taskbar and notifications
Authenticode signature is invalid
Accessed credential storage registry keys
Disables Windows Notification Center
Attempts to disable UAC
Attempts to modify user notification settings
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Win32.Vilsel.drmu?


File Info:
name: 88119A6D1C51E2C02EB4.mlwpath: /opt/CAPEv2/storage/binaries/007be0fb0f63ea121ae7614c578c2c60e1a36b674b48435d1f8972f14a943eaecrc32: C84D193Bmd5: 88119a6d1c51e2c02eb442e405cb01b0sha1: da9b815b8120b14b709b48f54d0f15ddd2f35eeasha256: 007be0fb0f63ea121ae7614c578c2c60e1a36b674b48435d1f8972f14a943eaesha512: 7ee6f82df2e67b00d4ff91fefbfc33e26306384428c50c039cd92693b5329e4f1ab9e09724c80219e12c3b40b8730d81f30d1c8ed26a02ceda2d2557ac1447b1ssdeep: 49152:2h+ZkldoPK8YaWmowEkClAvCBDa0yUhfdp:v2cPK8kbwyyiaQVdtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T19995D00367D1F062FF9A45735F75A3214EB86D66A523CD5F22E43A6EBA310E1132D223sha3_384: 7baad5f84037b4d62b895ee11a27770136d64cdb8f375f422228e212f7bfce671cc482748f135d3f70af6f19296ef173ep_bytes: e8c8d00000e97ffeffffcccccccccccctimestamp: 2018-11-14 02:39:46
Version Info:
Translation: 0x0809 0x04b0

Trojan.Win32.Vilsel.drmu also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Vilsel.4!c
tehtris	Generic.Malware
DrWeb	Trojan.MulDrop21.20255
MicroWorld-eScan	Trojan.GenericKD.64032298
ALYac	Trojan.GenericKD.64032298
Sangfor	Trojan.Win32.Agent.Viwu
K7AntiVirus	Trojan ( 0054f1d81 )
Alibaba	Trojan:Win32/Vilsel.4522a805
K7GW	Trojan ( 0054f1d81 )
CrowdStrike	win/malicious_confidence_60% (D)
VirIT	Trojan.Win32.Packed2.CJLD
Cyren	W32/AutoIt.OH.gen!Eldorado
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/Packed.Autoit.NAZ suspicious
APEX	Malicious
Kaspersky	Trojan.Win32.Vilsel.drmu
BitDefender	Trojan.GenericKD.64032298
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Vilsel.Kzfl
Emsisoft	Trojan.GenericKD.64032298 (B)
F-Secure	Heuristic.HEUR/AGEN.1319338
VIPRE	Trojan.GenericKD.64032298
McAfee-GW-Edition	BehavesLike.Win32.TrojanAitInject.tc
FireEye	Trojan.GenericKD.64032298
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
GData	Trojan.GenericKD.64032298
Google	Detected
Avira	HEUR/AGEN.1319338
MAX	malware (ai score=83)
Antiy-AVL	GrayWare/Autoit.BinToStr.a
Kingsoft	malware.kb.a.875
Arcabit	Trojan.Generic.D3D10E2A
ZoneAlarm	Trojan.Win32.Vilsel.drmu
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
AhnLab-V3	Malware/Win32.Generic.C3272894
Cylance	unsafe
Panda	Trj/CI.A
MaxSecure	Trojan.Malware.74329405.susgen
Fortinet	Malicious_Behavior.SB
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS