Categories: Trojan

TrojanDownloader:Win32/VB removal tips

The TrojanDownloader:Win32/VB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/VB virus can do?

Executable code extraction
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine TrojanDownloader:Win32/VB?


File Info:
crc32: 14D07857md5: 7d39bc4347e01ada4d51867418801084name: 7D39BC4347E01ADA4D51867418801084.mlwsha1: a5a1cc8f52850d22953838de242605aaf4a35bf0sha256: f94ad65450a43d8601ad22422d5a71be8dbaf4e4fdf155ed95dfd8ca234fd0e0sha512: 04e3c1af71ca26ecf2ccac9c00665ce4a67886cc20fbe2702415e95a5bd1da68ba130a796e4d67bc96d2ade32dab43203271ce67339f0d9cc2c00ea86e0c5025ssdeep: 1536:8PP16Xh9quucjghNemENTyOu7fMWFmsI2GvqtKmeryXV:8PAXh9ocjghI9I70mI2GiMmLVtype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
Translation: 0x0804 0x04b0InternalName: x5de5x7a0b1FileVersion: 5.01.2628CompanyName: Microsoft CorporationComments: x81eax52a8x4e0bx8f7dx5b89x88c5x7cfbx7edfProductName: x81eax52a8x4e0bx8f7dx5b89x88c5x7cfbx7edfProductVersion: 5.01.2628FileDescription: x81eax52a8x4e0bx8f7dx5b89x88c5x7cfbx7edfOriginalFilename: x5de5x7a0b1.exe

TrojanDownloader:Win32/VB also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.40595850
FireEye	Generic.mg.7d39bc4347e01ada
ALYac	Trojan.GenericKD.40595850
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic.pak!cobra
Sangfor	Malware
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Trojan.GenericKD.40595850
K7GW	Trojan ( 004bcce71 )
K7AntiVirus	Trojan ( 004bcce71 )
Baidu	Win32.Trojan.VB.hn
Symantec	Downloader
TotalDefense	Win32/VB.AL
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Trojan.VB-6820
Kaspersky	Trojan.Win32.VB.fse
Alibaba	TrojanDownloader:Win32/Generic.6adef149
NANO-Antivirus	Trojan.Win32.VB.pjsl
AegisLab	Trojan.Win32.VB.4!c
Rising	Trojan.DL.Win32.VB.ywk (CLASSIC)
Ad-Aware	Trojan.GenericKD.40595850
Emsisoft	Trojan.GenericKD.40595850 (B)
Comodo	TrojWare.Win32.Trojan.VB.~W@1es59r
F-Secure	Trojan.TR/Crypt.FKM.Gen
DrWeb	Trojan.Siggen3.25235
Zillya	Trojan.Katusha.Win32.15537
McAfee-GW-Edition	BehavesLike.Win32.Generic.lc
MaxSecure	Trojan.Malware.794254.susgen
CMC	Generic.Win32.7d39bc4347!CMCRadar
Sophos	ML/PE-A + Mal/VB-G
Ikarus	Trojan.Win32.VB
Jiangmin	Trojan/VB.czey
Webroot	W32.Malware.Downloader
Avira	TR/Crypt.FKM.Gen
Antiy-AVL	Trojan/Win32.VB
Microsoft	TrojanDownloader:Win32/VB
Arcabit	Trojan.Generic.D26B718A
ZoneAlarm	Trojan.Win32.VB.fse
GData	Trojan.GenericKD.40595850
Cynet	Malicious (score: 90)
AhnLab-V3	Trojan/Win32.VB.C37643
McAfee	Generic.dx!hv.g
MAX	malware (ai score=100)
VBA32	Trojan.VBRA.02582
Malwarebytes	Malware.Heuristic.1003
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/TrojanDownloader.VB.NQS
Tencent	Malware.Win32.Gencirc.114ccb80
Yandex	Trojan.VB!H12poqmGRgc
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/VB.G
BitDefenderTheta	AI:Packer.66343A8620
AVG	Win32:Malware-gen
Qihoo-360	Trojan.Generic