Trojan

TrojanClicker:Win32/VB malicious file

Malware Removal

The TrojanClicker:Win32/VB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanClicker:Win32/VB virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Authenticode signature is invalid

How to determine TrojanClicker:Win32/VB?


File Info:

name: 5EB3D09AB803776EF69B.mlw
path: /opt/CAPEv2/storage/binaries/c8926a3f001b42df787dbfe45e5eedd7e048bcd8b871871a365e5682d5d6d358
crc32: D43A6653
md5: 5eb3d09ab803776ef69b4cf32add1d21
sha1: b44353350b713b4850f49250b4a61b9e01fa06cb
sha256: c8926a3f001b42df787dbfe45e5eedd7e048bcd8b871871a365e5682d5d6d358
sha512: 201be2bb3d5d806f436cd299cd43de23419002a320eedaf57803a6c3e6a35b7a8a6552c18d0e9e2f1a8bc13314586960766dc86ed9c783d9deda877d0d5c635a
ssdeep: 192:iELioPsi7iwpLCvzdeW+PGMbhWuWkzeOmfvD+i9Dn0sPn0:pLbXiwR+Y4m7dmfvD+i9Dn0sP0
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C1D2A4239D2C51A1F70C87B14D32A6E96927BD3109518D1B695DFF9C0E32212AEF172F
sha3_384: 773d88d35d95f3ddba2ef2cc01068f0c5da6e7dc9870f6bda9d9114ec3903f7d98db5fc51ccabb9b50d4ec6178a73594
ep_bytes: 6850194000e8eeffffff000000000000
timestamp: 2003-03-31 12:00:20

Version Info:

Translation: 0x0409 0x04b0
FileDescription: System Debug Manager
LegalCopyright: Copyright (c) 2004
ProductName: System Debug Manager
FileVersion: 5.01.2600
ProductVersion: 5.01.2600
InternalName: sysdebug32
OriginalFilename: sysdebug32.exe

TrojanClicker:Win32/VB also known as:

BkavW32.Common.1CF9207B
LionicTrojan.Win32.VB.8!c
DrWebTrojan.DownLoader.1692
MicroWorld-eScanTrojan.Clicker.VB.DN
FireEyeTrojan.Clicker.VB.DN
CAT-QuickHealTrojan.AgentVMF.S7094818
McAfeeDownloader-TP.b
MalwarebytesMalware.AI.3190823816
ZillyaTrojan.VB.Win32.7139
SangforTrojan.Win32.VB.DN
K7AntiVirusSpyware ( 005732441 )
AlibabaTrojanClicker:Win32/AdClick.f2294f45
K7GWSpyware ( 005732441 )
CrowdStrikewin/malicious_confidence_100% (W)
VirITTrojan.Win32.VB.DT
CyrenW32/Adclicker.MCPL-3843
SymantecTrojan.Adwarehelper
ESET-NOD32Win32/TrojanClicker.VB.DN
APEXMalicious
ClamAVWin.Trojan.Clicker-2854
KasperskyTrojan-Clicker.Win32.VB.dn
BitDefenderTrojan.Clicker.VB.DN
NANO-AntivirusTrojan.Win32.VB.bcuno
AvastWin32:VB-AJL [Trj]
TencentWin32.Trojan.Vb.Czlw
EmsisoftTrojan.Clicker.VB.DN (B)
VIPRETrojan.Clicker.VB.DN
TrendMicroTROJ_CLICKER.DN
McAfee-GW-EditionDownloader-TP.b
SophosTroj/AdClick-DN
GDataTrojan.Clicker.VB.DN
JiangminTrojanClicker.VB.lrw
WebrootAdware.MediaPlace
GoogleDetected
MAXmalware (ai score=100)
Antiy-AVLTrojan[Clicker]/Win32.VB
XcitiumTrojWare.Win32.TrojanClicker.VB.DN@23rc
ArcabitTrojan.Clicker.VB.DN
ViRobotTrojan.Win32.Clicker.28672.B
ZoneAlarmTrojan-Clicker.Win32.VB.dn
MicrosoftTrojanClicker:Win32/VB
ALYacTrojan.Clicker.VB.DN
VBA32TrojanClicker.VB
Cylanceunsafe
PandaTrj/Clicker.CP
TrendMicro-HouseCallTROJ_CLICKER.DN
RisingTrojan.Clicker.VB.id (CLASSIC)
YandexTrojan.CL.VB!baEThL1R6Cc
IkarusTrojan-Clicker.Win32.VB.DN
MaxSecureTrojan.Malware.1850343.susgen
AVGWin32:VB-AJL [Trj]
Cybereasonmalicious.ab8037
DeepInstinctMALICIOUS

How to remove TrojanClicker:Win32/VB?

TrojanClicker:Win32/VB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment