TrojanDropper:Win32/VB.CQ removal

The TrojanDropper:Win32/VB.CQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What TrojanDropper:Win32/VB.CQ virus can do?

Executable code extraction
Anomalous binary characteristics

How to determine TrojanDropper:Win32/VB.CQ?


File Info:
crc32: AE9CC9A5
md5: ff1b644384951f485a1391336df327dc
name: FF1B644384951F485A1391336DF327DC.mlw
sha1: 40f4f10914d34bd8ce0c59001798be9c118b0814
sha256: 5101e54907f953c6860b8c17f43989681a6930927fe0fe1500128e477868af92
sha512: 6f57d8a73686311432463c5794a063cee03d64c11ef61009119cd514a6a41ab7d434a4e6ff54942db06c41fc49f6de1ff419b0fea93e88a7f7668b8682bcccd3
ssdeep: 3072:CjR3LpSh/A+ry3FjbqVoqM4ajwMSKlopLYvPAlaMq4UIcEGbMoY:e7gVHr4jx4A5lopLYMah4UIcEkY
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: Copyright FenSoft 2002 - 2004 All Rights Reserved
InternalName: stub
FileVersion: 1.00
CompanyName: FenSoft 
LegalTrademarks: Dependancy Injector Is a Registered TradeMark
Comments: Dependancy Injector v1.0
ProductName: Dependancy Injector v1.0
ProductVersion: 1.00
FileDescription: Dependancy Injector v1.0
OriginalFilename: stub.exe

TrojanDropper:Win32/VB.CQ also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 00008b511 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Jonnil
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Razy.656192
Cylance	Unsafe
Zillya	Dropper.VB.Win32.22823
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	TrojanDropper:Win32/Blocker.0eb1a3b0
K7GW	Trojan ( 00008b511 )
Cybereason	malicious.384951
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/TrojanDropper.VB.BJ
APEX	Malicious
Avast	Win32:VB-AWT [Trj]
ClamAV	Win.Trojan.VB-91
Kaspersky	Trojan-Ransom.Win32.Blocker.igfs
BitDefender	Gen:Variant.Razy.656192
NANO-Antivirus	Trojan.Win32.VB.ebzkue
ViRobot	Dropper.VB.16384
MicroWorld-eScan	Gen:Variant.Razy.656192
Tencent	Malware.Win32.Gencirc.10c2804c
Ad-Aware	Gen:Variant.Razy.656192
Sophos	ML/PE-A + Troj/Delf-ALA
Comodo	TrojWare.Win32.TrojanDropper.VB.BJ@2hzk
BitDefenderTheta	AI:Packer.8141D3201F
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_VB.AQP
McAfee-GW-Edition	BehavesLike.Win32.Generic.cc
FireEye	Generic.mg.ff1b644384951f48
Emsisoft	Gen:Variant.Razy.656192 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Drop.VB.bj.7
eGambit	Unsafe.AI_Score_94%
Microsoft	TrojanDropper:Win32/VB.CQ
GData	Gen:Variant.Razy.656192
AhnLab-V3	Dropper/Win32.Xema.R133793
McAfee	MultiDropper-MX
MAX	malware (ai score=100)
VBA32	Malware-Cryptor.VB.gen.1
Panda	Trj/VB.CC
TrendMicro-HouseCall	TROJ_VB.AQP
Rising	Dropper.Vbex!1.99F0 (CLOUD)
Yandex	Trojan.GenAsa!Uol7ng1KuY0
Ikarus	Trojan-Dropper.Win32.VB.BJ
Fortinet	W32/VBDropper.BJ!tr
AVG	Win32:VB-AWT [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Blocker.HwMAqiwA

How to remove TrojanDropper:Win32/VB.CQ?

TrojanDropper:Win32/VB.CQ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X