Trojan.Win32.Vilsel.loy removal guide

The Trojan.Win32.Vilsel.loy is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Vilsel.loy virus can do?

Behavioural detection: Executable code extraction – unpacking
At least one process apparently crashed during execution
Dynamic (imported) function loading detected
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan.Win32.Vilsel.loy?


File Info:
name: D8D98A835E8D838A36AF.mlw
path: /opt/CAPEv2/storage/binaries/86a59825263c95dc8fa940a5d8f00f63aefdaf88491b78d3f91d67d7eb2dff27
crc32: FFD69B4C
md5: d8d98a835e8d838a36afcb8e94215cc5
sha1: 5df0916b4ae928d98001a242e6b1c77a0b3a7892
sha256: 86a59825263c95dc8fa940a5d8f00f63aefdaf88491b78d3f91d67d7eb2dff27
sha512: d1fd1be5aa63e380c0343c41601626c28d718ff54adf4af11b8d9ab6ecbf84ab250f6f7c1231cad73386b7ed39c1a16194d6512b5ed897887d9c73c64324019c
ssdeep: 192:T2SvPw20GfZCA7mfm/UbO6WbpCA7epZpxB:q6wvGfPmfmsxWb/83B
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12073C913B546C4A1F1AE92329856939A5217FC61EF124F43A45C3F3E3FB31915DE2B24
sha3_384: f863b7f746bba88eba384f7855f2a402df10d6770e93edd638020537b9ff3bd4ac94a249367ccb2f827d4f2d9e7cd618
ep_bytes: 68946d4000e8f0ffffff000000000000
timestamp: 2009-01-06 04:02:14

Version Info:
Translation: 0x0409 0x04b0
CompanyName: SBC
ProductName: Microsoft Windows
FileVersion: 1.00.0057
ProductVersion: 1.00.0057
InternalName: musicvn
OriginalFilename: musicvn.exe

Trojan.Win32.Vilsel.loy also known as:

Bkav	W32.FamVT.ViselCPM.Worm
Elastic	malicious (high confidence)
DrWeb	Trojan.Copyself.102
MicroWorld-eScan	Gen:Trojan.Heur.em0@syJem3pi
FireEye	Generic.mg.d8d98a835e8d838a
ALYac	Gen:Trojan.Heur.em0@syJem3pi
Malwarebytes	Worm.VBAgent
Sangfor	[MICROSOFT VISUAL BASIC 5.0]
CrowdStrike	win/malicious_confidence_70% (D)
K7GW	P2PWorm ( 000fc32e1 )
K7AntiVirus	P2PWorm ( 000fc32e1 )
BitDefenderTheta	AI:Packer.26D75C451C
Symantec	ML.Attribute.HighConfidence
Avast	Win32:Vilsel-CT [Trj]
ClamAV	Win.Malware.Vilsel-9856792-0
Kaspersky	Trojan.Win32.Vilsel.loy
BitDefender	Gen:Trojan.Heur.em0@syJem3pi
Ad-Aware	Gen:Trojan.Heur.em0@syJem3pi
Emsisoft	Gen:Trojan.Heur.em0@syJem3pi (B)
Comodo	TrojWare.Win32.Inject.AHIW@4y7ca5
Sophos	Mal/Generic-S
Jiangmin	Trojan/Vilsel.adtk
Webroot	W32.Rimod.Gen
Microsoft	Trojan:Win32/Wacatac.B!ml
ViRobot	Trojan.Win32.A.Vilsel.77824
ZoneAlarm	Trojan.Win32.Vilsel.loy
GData	Gen:Trojan.Heur.em0@syJem3pi
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Vilsel.R479268
McAfee	GenericRXAA-AA!D8D98A835E8D
MAX	malware (ai score=85)
Cylance	Unsafe
APEX	Malicious
Rising	Trojan.Win32.Generic.14CBE02A (C64:YzY0OteM4vllAceJ)
Yandex	Trojan.GenAsa!GuZfDPZ3KtE
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.W32.Vilsel.loy
Fortinet	W32/PossibleThreat
AVG	Win32:Vilsel-CT [Trj]
Cybereason	malicious.35e8d8
Panda	Trj/GdSda.A

How to remove Trojan.Win32.Vilsel.loy?

Trojan.Win32.Vilsel.loy removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X