TrojanDownloader:Win32/VB removal tips

The TrojanDownloader:Win32/VB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/VB virus can do?

Executable code extraction
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine TrojanDownloader:Win32/VB?


File Info:
crc32: 14D07857
md5: 7d39bc4347e01ada4d51867418801084
name: 7D39BC4347E01ADA4D51867418801084.mlw
sha1: a5a1cc8f52850d22953838de242605aaf4a35bf0
sha256: f94ad65450a43d8601ad22422d5a71be8dbaf4e4fdf155ed95dfd8ca234fd0e0
sha512: 04e3c1af71ca26ecf2ccac9c00665ce4a67886cc20fbe2702415e95a5bd1da68ba130a796e4d67bc96d2ade32dab43203271ce67339f0d9cc2c00ea86e0c5025
ssdeep: 1536:8PP16Xh9quucjghNemENTyOu7fMWFmsI2GvqtKmeryXV:8PAXh9ocjghI9I70mI2GiMmLV
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
Translation: 0x0804 0x04b0
InternalName: x5de5x7a0b1
FileVersion: 5.01.2628
CompanyName: Microsoft Corporation
Comments: x81eax52a8x4e0bx8f7dx5b89x88c5x7cfbx7edf
ProductName: x81eax52a8x4e0bx8f7dx5b89x88c5x7cfbx7edf
ProductVersion: 5.01.2628
FileDescription: x81eax52a8x4e0bx8f7dx5b89x88c5x7cfbx7edf
OriginalFilename: x5de5x7a0b1.exe

TrojanDownloader:Win32/VB also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.40595850
FireEye	Generic.mg.7d39bc4347e01ada
ALYac	Trojan.GenericKD.40595850
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic.pak!cobra
Sangfor	Malware
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Trojan.GenericKD.40595850
K7GW	Trojan ( 004bcce71 )
K7AntiVirus	Trojan ( 004bcce71 )
Baidu	Win32.Trojan.VB.hn
Symantec	Downloader
TotalDefense	Win32/VB.AL
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Trojan.VB-6820
Kaspersky	Trojan.Win32.VB.fse
Alibaba	TrojanDownloader:Win32/Generic.6adef149
NANO-Antivirus	Trojan.Win32.VB.pjsl
AegisLab	Trojan.Win32.VB.4!c
Rising	Trojan.DL.Win32.VB.ywk (CLASSIC)
Ad-Aware	Trojan.GenericKD.40595850
Emsisoft	Trojan.GenericKD.40595850 (B)
Comodo	TrojWare.Win32.Trojan.VB.~W@1es59r
F-Secure	Trojan.TR/Crypt.FKM.Gen
DrWeb	Trojan.Siggen3.25235
Zillya	Trojan.Katusha.Win32.15537
McAfee-GW-Edition	BehavesLike.Win32.Generic.lc
MaxSecure	Trojan.Malware.794254.susgen
CMC	Generic.Win32.7d39bc4347!CMCRadar
Sophos	ML/PE-A + Mal/VB-G
Ikarus	Trojan.Win32.VB
Jiangmin	Trojan/VB.czey
Webroot	W32.Malware.Downloader
Avira	TR/Crypt.FKM.Gen
Antiy-AVL	Trojan/Win32.VB
Microsoft	TrojanDownloader:Win32/VB
Arcabit	Trojan.Generic.D26B718A
ZoneAlarm	Trojan.Win32.VB.fse
GData	Trojan.GenericKD.40595850
Cynet	Malicious (score: 90)
AhnLab-V3	Trojan/Win32.VB.C37643
McAfee	Generic.dx!hv.g
MAX	malware (ai score=100)
VBA32	Trojan.VBRA.02582
Malwarebytes	Malware.Heuristic.1003
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/TrojanDownloader.VB.NQS
Tencent	Malware.Win32.Gencirc.114ccb80
Yandex	Trojan.VB!H12poqmGRgc
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/VB.G
BitDefenderTheta	AI:Packer.66343A8620
AVG	Win32:Malware-gen
Qihoo-360	Trojan.Generic

How to remove TrojanDownloader:Win32/VB?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

TrojanDownloader:Win32/VB removal tips