Categories: Trojan

TrojanDownloader:Win32/VB.YJ!bit removal guide

The TrojanDownloader:Win32/VB.YJ!bit is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/VB.YJ!bit virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (4 unique times)
A process attempted to delay the analysis task.
Reads data out of its own binary image
Performs some HTTP requests
Anomalous binary characteristics

Related domains:

files.fm

ocsp.comodoca.com

ocsp.usertrust.com

How to determine TrojanDownloader:Win32/VB.YJ!bit?


File Info:
crc32: 6342D605md5: 521be5e581637d5a7b6c3c29b0544f7bname: 521BE5E581637D5A7B6C3C29B0544F7B.mlwsha1: 9bc4bf9dd2a1a0f871b59840947d2f1868c8adadsha256: dcff1d0b3138be4a6bbf8dfc2fd281e5c8da013f644920a5bb024501dcfec9d6sha512: a66d5da125c921d7867132a69e1eb7f789f102ef3f4c8040c93924b56f149a3e21a9d36d304b3e5a9c5207e16708aa451397735d99da0d815478f58fd9580c80ssdeep: 96:/lxqEv4nIml51p2ahsDG7Wn+o4LaAhW5qSgEO2fi:/TNgnImlQGQ+5aESLOjtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0407 0x04b0ProductVersion: 1.00InternalName: Security_DownloaderFileVersion: 1.00OriginalFilename: Security_Downloader.exeProductName: Security_Downloader

TrojanDownloader:Win32/VB.YJ!bit also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Trojan.Downloader.bm1@a88oPur
FireEye	Generic.mg.521be5e581637d5a
McAfee	Trojan-FHYU!521BE5E58163
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan-Downloader ( 004e05051 )
BitDefender	Gen:Trojan.Downloader.bm1@a88oPur
K7GW	Trojan-Downloader ( 004e05051 )
Cybereason	malicious.581637
Cyren	W32/Trojan.NWVK-3392
Symantec	Trojan.Klovbot
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Onion-7586909-0
Kaspersky	HEUR:Trojan.Win32.Generic
Rising	Downloader.VB!8.1EB (TFE:3:QI2heKLvEOV)
Ad-Aware	Gen:Trojan.Downloader.bm1@a88oPur
Emsisoft	Gen:Trojan.Downloader.bm1@a88oPur (B)
F-Secure	Trojan.TR/Zusy.lasd
DrWeb	Trojan.DownLoader21.34793
Zillya	Downloader.Agent.Win32.292950
TrendMicro	TROJ_ZUSY_FC140222.UVPM
McAfee-GW-Edition	Trojan-FHYU!521BE5E58163
Ikarus	Trojan-Downloader.Win32.VB
Jiangmin	Trojan.NSIS.jx
Avira	TR/Zusy.lasd
Antiy-AVL	Trojan[Ransom]/NSIS.Onion
Microsoft	TrojanDownloader:Win32/VB.YJ!bit
Arcabit	Trojan.Downloader.EE8FF3
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Trojan.Downloader.bm1@a88oPur
Cynet	Malicious (score: 85)
AhnLab-V3	Malware/Win32.Generic.C1322990
BitDefenderTheta	AI:Packer.97C9DB801E
ALYac	Gen:Trojan.Downloader.bm1@a88oPur
MAX	malware (ai score=80)
Malwarebytes	Trojan.Downloader
Panda	Trj/Genetic.gen
ESET-NOD32	Win32/TrojanDownloader.VB.QXD
TrendMicro-HouseCall	TROJ_ZUSY_FC140222.UVPM
Tencent	Malware.Win32.Gencirc.114b3bd1
Yandex	Trojan.Onion!ZGegkkxv+fM
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Generic.AC.3380174
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_80% (D)
Qihoo-360	Win32/Trojan.b36