TrojanClicker:Win32/Vigorf.A removal

The TrojanClicker:Win32/Vigorf.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What TrojanClicker:Win32/Vigorf.A virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Attempts to modify proxy settings

Related domains:

z.whorecord.xyz

toolbar.ask.com

a.tomx.xyz

How to determine TrojanClicker:Win32/Vigorf.A?


File Info:
crc32: 394A0151
md5: 22ba61151fdd7ae853579181ef5c9737
name: vdownloader_setup.exe
sha1: 059a555c6f7856ab697bec3a1d0042ba9f60611d
sha256: f9dca1cd934c2732385c95c97d948cda1fa7b691b86338c7c117f11b32c63af4
sha512: 2292cfe9b734e27a0e1aac08b4799e41afb5e66e37923e279e81cb97a01b9c59bf38822aca274a89d89bd01b80f7fe79c247a3ff8137cc7ebc2de5143c113163
ssdeep: 98304:4N9WL/pY46s3jKN+2CRx5rDyl6Fw7oDqggsyvSoYyORXCrvX5oHni:6WL/mp+2CyQFw6lsWvXCjXOHni
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright:                                                                                                     
FileVersion:                     
CompanyName: Enrique Puertas                                             
Comments: This installation was built with Inno Setup.
ProductName: VDownloader                                                 
ProductVersion:                     
FileDescription: VDownloader Setup                                           
Translation: 0x0000 0x04b0

TrojanClicker:Win32/Vigorf.A also known as:

CAT-QuickHeal	TrojanClicker.Yabector
McAfee	Artemis!22BA61151FDD
Cylance	Unsafe
Zillya	Trojan.Goldun.Win32.1800
TheHacker	Trojan/Dropper.FrauDrop.jl
K7GW	Riskware ( 0040f0f51 )
K7AntiVirus	Riskware ( 0040f0f51 )
NANO-Antivirus	Trojan.Win32.GoldSpy.brkaat
Cyren	W32/GenBl.9DC0F7B1!Olympus
Symantec	Trojan.ADH
TrendMicro-HouseCall	TROJ_GE.B148653B
Avast	Win32:Malware-gen
Kaspersky	not-a-virus:WebToolbar.Win32.Asparnet.dnq
AegisLab	Trojan.Win32.Goldun.l!c
Rising	Malware.Undefined!8.C (TFE:3:U8NDIA9FIpS)
DrWeb	Trojan.PWS.GoldSpy.3657
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GE.B148653B
McAfee-GW-Edition	Artemis!Trojan
Sophos	Mal/Generic-L
Webroot	W32.Trojan.Trojan-Dropper.Gen.X
Antiy-AVL	Trojan/Win32.SGeneric
Microsoft	TrojanClicker:Win32/Vigorf.A
ZoneAlarm	not-a-virus:WebToolbar.Win32.Asparnet.dnq
GData	Win32.Trojan.Agent.WYMFCF
AVware	Trojan.Win32.Generic!BT
VBA32	TrojanSpy.Goldun
ESET-NOD32	a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe
MAX	malware (ai score=100)
Fortinet	W32/Goldun.DRG!tr
AVG	Win32:Malware-gen
Panda	PUP/Generic

How to remove TrojanClicker:Win32/Vigorf.A?

TrojanClicker:Win32/Vigorf.A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X