Categories: Trojan

TrojanDownloader:Win32/VB.VJ removal tips

The TrojanDownloader:Win32/VB.VJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/VB.VJ virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
Performs some HTTP requests
Unconventionial language used in binary resources: Spanish (Modern)
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
Creates a hidden or system file
Attempts to modify proxy settings
Attempts to disable UAC
The sample wrote data to the system hosts file.
Attempts to modify or disable Security Center warnings
Anomalous binary characteristics

Related domains:

student.d3ti.mipa.uns.ac.id

How to determine TrojanDownloader:Win32/VB.VJ?


File Info:
crc32: BA47F81Cmd5: 8de6dbd9ddf36a1fe1d3f8f95b19984bname: 8DE6DBD9DDF36A1FE1D3F8F95B19984B.mlwsha1: cebb9c0ef3b54ae69c8b56593ec8492f11d0aacasha256: 128f48dde8f41fb96aba0fb98d82711afc102d1ca6e7d168fa33cd66ddb6ef07sha512: 649d6003e774995762db8e1817339b744380a9f593c0c698a7142ce659a38445aa91763a1a6f857c12506b3808cf77a1513ea316714a041ae8a5e519be38974assdeep: 192:1UgL9ZYIg54moXRO/EIAenS+Fplv+QDmUmswLx2UmCVuwbwQbEmBUg+:99Zo54moFheZFD+QDmswl2UKkbEmtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0c0a 0x04b0InternalName: jorgehackFileVersion: 1.00.0002CompanyName: CasaComments: Conectar Base de DatosProductName: baseProductVersion: 1.00.0002OriginalFilename: jorgehack.exe

TrojanDownloader:Win32/VB.VJ also known as:

Bkav	W32.AIDetectVM.malware1
MicroWorld-eScan	Gen:Variant.Razy.804988
FireEye	Generic.mg.8de6dbd9ddf36a1f
McAfee	Artemis!8DE6DBD9DDF3
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Generic.4!c
Sangfor	Malware
BitDefender	Gen:Variant.Razy.804988
Cybereason	malicious.9ddf36
BitDefenderTheta	AI:Packer.566DA5FD1E
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Spy.Bancos.OLQ
APEX	Malicious
Avast	Win32:VB-ZOF [Spy]
ClamAV	Win.Trojan.Brwhosu-7667057-0
Kaspersky	Trojan-Clicker.Win32.Clicker.bg
Alibaba	TrojanDownloader:Win32/Clicker.81fcdc7b
NANO-Antivirus	Trojan.Win32.Dwn.yqysi
ViRobot	Trojan.Win32.Z.Bancos.20480
Tencent	Win32.Trojan.Clicker.Efva
Ad-Aware	Gen:Variant.Razy.804988
Sophos	Mal/Generic-S
Comodo	Malware@#wm0l9r0jnqg7
DrWeb	Trojan.MulDrop4.26625
Zillya	Trojan.Bancos.Win32.12603
McAfee-GW-Edition	BehavesLike.Win32.Trojan.mz
Emsisoft	Gen:Variant.Razy.804988 (B)
Jiangmin	Trojan/VBKrypt.hdrf
Avira	TR/Dldr.VB.vj.56
MAX	malware (ai score=84)
Antiy-AVL	Trojan[Clicker]/Win32.Clicker
Kingsoft	Win32.Heur.KVM011.a.(kcloud)
Microsoft	TrojanDownloader:Win32/VB.VJ
Arcabit	Trojan.Razy.DC487C
ZoneAlarm	Trojan-Clicker.Win32.Clicker.bg
GData	Gen:Variant.Razy.804988
Cynet	Malicious (score: 85)
VBA32	TrojanClicker.Clicker
ALYac	Gen:Variant.Razy.804988
Malwarebytes	Generic.Malware/Suspicious
Panda	Generic Malware
Rising	Trojan.DL.Win32.VBdl.b (CLOUD)
Yandex	Trojan.GenAsa!AByTQlg0m5E
Ikarus	Trojan.VB
Fortinet	W32/Bancos.OLQ!tr.spy
Webroot	W32.Malware.Heur
AVG	Win32:VB-ZOF [Spy]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Win32/Trojan.Spy.fd9