Categories: Trojan

TrojanDropper:Win32/VB.IL removal guide

The TrojanDropper:Win32/VB.IL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDropper:Win32/VB.IL virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid
Attempts to disable or modify Explorer Folder Options
Attempts to modify Explorer settings to prevent file extensions from being displayed
Attempts to modify Explorer settings to prevent hidden files from being displayed

How to determine TrojanDropper:Win32/VB.IL?


File Info:
name: 47408E6AA593A07B7FAD.mlwpath: /opt/CAPEv2/storage/binaries/141bce2f6ebbc53a27800d8d65b54e2275b6b925e94c9d4b6fd4de2f50cabfabcrc32: 2FC94ED8md5: 47408e6aa593a07b7fad082bcfec8bdesha1: fb612e1f622d9ed31627a69fbb675084db29bc7asha256: 141bce2f6ebbc53a27800d8d65b54e2275b6b925e94c9d4b6fd4de2f50cabfabsha512: b03bdf37f4c696ac7ac7616f260c1b8d9b87495f3df44969be1285c85d3ee20e8c2c5f4ef0bfb1a45d65dfbed0e8090007b5a48ea3156edf6494535cb74f067fssdeep: 768:CpQNwC3BESe4Vqth+0V5vKPyLylze70wi3BEma:CeT7BVwxfvLFwjRatype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D7A402D8C555BE39C78729BAD024EE0A10362CE0F366C4B7F87B72C1FAB55C23564929sha3_384: 6737860706f158676c32766ce9697b8a3006b436cc79ea41c024ceeee3f7272c25fa77667c6694af0433fdbfe211ed2fep_bytes: 68946d4000e8f0ffffff000000000000timestamp: 2009-01-06 04:02:14
Version Info:
Translation: 0x0409 0x04b0CompanyName: SBCProductName: Microsoft WindowsFileVersion: 1.00.0057ProductVersion: 1.00.0057InternalName: musicvnOriginalFilename: musicvn.exe

TrojanDropper:Win32/VB.IL also known as:

Bkav	W32.AIDetect.malware1
MicroWorld-eScan	Trojan.Generic.4385790
ClamAV	Win.Malware.Genpack-6989317-0
FireEye	Generic.mg.47408e6aa593a07b
ALYac	Trojan.Generic.4385790
Cylance	Unsafe
Zillya	Trojan.Vilsel.Win32.13108
Sangfor	Worm.Win32.VB.pro3
K7AntiVirus	Trojan ( 004bcce41 )
K7GW	Trojan ( 004bcce41 )
Cybereason	malicious.aa593a
Baidu	Win32.Trojan.VB.x
Cyren	W32/Vilsel.M.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	Win32/VB.OZA
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Vilsel.loy
BitDefender	Trojan.Generic.4385790
NANO-Antivirus	Trojan.Win32.Vilsel.fwrjnb
SUPERAntiSpyware	Trojan.Agent/Gen-Dropper
Avast	Win32:Vilsel-CT [Trj]
Tencent	Trojan.Win32.VB.ctb
Ad-Aware	Trojan.Generic.4385790
Emsisoft	Trojan.Generic.4385790 (B)
Comodo	TrojWare.Win32.Trojan.Vilsel.loy0@1qq4nk
DrWeb	Trojan.Copyself.102
VIPRE	Trojan.Generic.4385790
TrendMicro	TROJ_GEN.R03BC0DHS22
McAfee-GW-Edition	BehavesLike.Win32.Generic.gt
Trapmine	malicious.high.ml.score
Sophos	ML/PE-A + Mal/VB-F
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.Vilsel.A
Jiangmin	Trojan/Vilsel.adtk
Avira	TR/Dropper.Gen
MAX	malware (ai score=83)
Antiy-AVL	Trojan/Generic.ASMalwS.76
Arcabit	Trojan.Generic.D42EBFE
ZoneAlarm	Trojan-Ransom.Win32.Blocker.kjac
Microsoft	TrojanDropper:Win32/VB.IL
Google	Detected
AhnLab-V3	Win-Trojan/VBKrypt.RP04.X1877
Acronis	suspicious
McAfee	Generic VB.z
VBA32	TScope.Trojan.VB
Malwarebytes	Generic.Trojan.Malicious.DDS
TrendMicro-HouseCall	TROJ_GEN.R03BC0DHS22
Rising	Trojan.VB!1.BAD4 (CLASSIC)
Yandex	Trojan.Vilsel!QlcS5IdPwZo
Ikarus	Trojan.Win32.Scar
MaxSecure	Trojan.W32.Vilsel.loy
BitDefenderTheta	AI:Packer.0B6DD7F41C
AVG	Win32:Vilsel-CT [Trj]
Panda	Trj/Vilsel.V
CrowdStrike	win/malicious_confidence_100% (W)