TrojanDownloader:Win32/VB.YJ!bit removal guide

The TrojanDownloader:Win32/VB.YJ!bit is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/VB.YJ!bit virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (4 unique times)
A process attempted to delay the analysis task.
Reads data out of its own binary image
Performs some HTTP requests
Anomalous binary characteristics

Related domains:

files.fm

ocsp.comodoca.com

ocsp.usertrust.com

How to determine TrojanDownloader:Win32/VB.YJ!bit?


File Info:
crc32: 6342D605
md5: 521be5e581637d5a7b6c3c29b0544f7b
name: 521BE5E581637D5A7B6C3C29B0544F7B.mlw
sha1: 9bc4bf9dd2a1a0f871b59840947d2f1868c8adad
sha256: dcff1d0b3138be4a6bbf8dfc2fd281e5c8da013f644920a5bb024501dcfec9d6
sha512: a66d5da125c921d7867132a69e1eb7f789f102ef3f4c8040c93924b56f149a3e21a9d36d304b3e5a9c5207e16708aa451397735d99da0d815478f58fd9580c80
ssdeep: 96:/lxqEv4nIml51p2ahsDG7Wn+o4LaAhW5qSgEO2fi:/TNgnImlQGQ+5aESLOj
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0407 0x04b0
ProductVersion: 1.00
InternalName: Security_Downloader
FileVersion: 1.00
OriginalFilename: Security_Downloader.exe
ProductName: Security_Downloader

TrojanDownloader:Win32/VB.YJ!bit also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Trojan.Downloader.bm1@a88oPur
FireEye	Generic.mg.521be5e581637d5a
McAfee	Trojan-FHYU!521BE5E58163
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan-Downloader ( 004e05051 )
BitDefender	Gen:Trojan.Downloader.bm1@a88oPur
K7GW	Trojan-Downloader ( 004e05051 )
Cybereason	malicious.581637
Cyren	W32/Trojan.NWVK-3392
Symantec	Trojan.Klovbot
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Onion-7586909-0
Kaspersky	HEUR:Trojan.Win32.Generic
Rising	Downloader.VB!8.1EB (TFE:3:QI2heKLvEOV)
Ad-Aware	Gen:Trojan.Downloader.bm1@a88oPur
Emsisoft	Gen:Trojan.Downloader.bm1@a88oPur (B)
F-Secure	Trojan.TR/Zusy.lasd
DrWeb	Trojan.DownLoader21.34793
Zillya	Downloader.Agent.Win32.292950
TrendMicro	TROJ_ZUSY_FC140222.UVPM
McAfee-GW-Edition	Trojan-FHYU!521BE5E58163
Ikarus	Trojan-Downloader.Win32.VB
Jiangmin	Trojan.NSIS.jx
Avira	TR/Zusy.lasd
Antiy-AVL	Trojan[Ransom]/NSIS.Onion
Microsoft	TrojanDownloader:Win32/VB.YJ!bit
Arcabit	Trojan.Downloader.EE8FF3
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Trojan.Downloader.bm1@a88oPur
Cynet	Malicious (score: 85)
AhnLab-V3	Malware/Win32.Generic.C1322990
BitDefenderTheta	AI:Packer.97C9DB801E
ALYac	Gen:Trojan.Downloader.bm1@a88oPur
MAX	malware (ai score=80)
Malwarebytes	Trojan.Downloader
Panda	Trj/Genetic.gen
ESET-NOD32	Win32/TrojanDownloader.VB.QXD
TrendMicro-HouseCall	TROJ_ZUSY_FC140222.UVPM
Tencent	Malware.Win32.Gencirc.114b3bd1
Yandex	Trojan.Onion!ZGegkkxv+fM
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Generic.AC.3380174
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_80% (D)
Qihoo-360	Win32/Trojan.b36

How to remove TrojanDownloader:Win32/VB.YJ!bit?

TrojanDownloader:Win32/VB.YJ!bit removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

TrojanDownloader:Win32/VB.YJ!bit removal guide