Crack • Trojan

What is “Trojan:Win32/BrowserPatch!ibt”?

Malware Removal

The Trojan:Win32/BrowserPatch!ibt is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:Win32/BrowserPatch!ibt virus can do?

  • Presents an Authenticode digital signature
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Binary compilation timestomping detected

How to determine Trojan:Win32/BrowserPatch!ibt?



File Info:

name: 14B3F4C979388F8DC097.mlw
path: /opt/CAPEv2/storage/binaries/8251ec065124e4a52eccfa0df33c8cf61898e1950a8c83e5427712b694c26600
crc32: 9096837F
md5: 14b3f4c979388f8dc097eaeea2720b09
sha1: b416fdf471a778169fb4c7df35dd689a9e741690
sha256: 8251ec065124e4a52eccfa0df33c8cf61898e1950a8c83e5427712b694c26600
sha512: 1985525312a6b2566c068562a2eb7112b5e8670b0986ed6800b6c6553113c62ad901ad1e41d1188d9d28f2f95d445d3945dcb0af9820dc80b49b7ca272a89070
ssdeep: 12288:IfrfKja7wBK1S+hdClWGqR6cIxKm1Wzcn3QuXFjnC5Q+4NFL8fKJ/ywgyySyCG4x:IDfKjAamLHhMQaFjn3hseyAgCGM
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A0454A12A309CC35F77210B04D66663142AFED9207EA41D772DD7E663AB8AD136F2387
sha3_384: aca823e368edacab9550944e9fd895724574223d33f8a61fcc631b0d4d21d058bfb501aecee1e4f53ec385c691f34523
ep_bytes: fc683274910c8bf48d7ef433dbb7042b
timestamp: 2051-01-21 05:27:14


Version Info:

CompanyName: Tencent
FileDescription: QQ浏览器
FileVersion: 9.7.13021.400
InternalName: QQBrowser_exe
LegalCopyright: Copyright 2015 Tencent. All rights reserved.
OriginalFilename: QQBrowser.exe
ProductName: QQ浏览器
ProductVersion: 9.7.13021.400
SpecialBuild: 1023
PrivateBuild: 10016
KernelBuild: 129
KernelVersion: 53.0.2785.104
Translation: 0x0409 0x04b0

Trojan:Win32/BrowserPatch!ibt also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Patched.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanWin32.Patched.Ten.A
FireEyeGeneric.mg.14b3f4c979388f8d
ALYacWin32.Patched.Ten.A
CylanceUnsafe
ZillyaTrojan.Patched.Win32.144473
SangforTrojan.Win32.Patched.gen
AlibabaTrojan:Win32/BrowserPatch.7b73ed7a
Cybereasonmalicious.979388
BitDefenderThetaGen:NN.ZexaF.34182.hL0@aOUXUwki
CyrenW32/Cekno.A.gen!Eldorado
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTROJ_GEN.R002C0DAQ22
AvastWin32:Vimes [Inf]
KasperskyHEUR:Trojan.Win32.Patched.gen
BitDefenderWin32.Patched.Ten.A
NANO-AntivirusVirus.Win32.Gen.ccmw
TencentWin32.Trojan.Patched.Dyql
Ad-AwareWin32.Patched.Ten.A
EmsisoftWin32.Patched.Ten.A (B)
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0DAQ22
McAfee-GW-EditionBehavesLike.Win32.Generic.th
SophosMal/Generic-S
Paloaltogeneric.ml
JiangminTrojan.Generic.frnhl
AviraTR/Patched.Gen
Antiy-AVLTrojan/Generic.ASBOL.C59E
MicrosoftTrojan:Win32/BrowserPatch!ibt
ZoneAlarmHEUR:Trojan.Win32.Patched.gen
GDataWin32.Patched.Ten.A
CynetMalicious (score: 100)
Acronissuspicious
McAfeeGenericRXAA-FA!14B3F4C97938
MAXmalware (ai score=94)
VBA32Trojan.Occamy
APEXMalicious
RisingTrojan.BrowserPatch!8.11105 (CLOUD)
SentinelOneStatic AI – Malicious PE
MaxSecureWin.MxResIcn.Heur.Gen
FortinetW32/Agent.DSAE!tr
AVGWin32:Vimes [Inf]
PandaTrj/Genetic.gen
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Trojan:Win32/BrowserPatch!ibt?

Trojan:Win32/BrowserPatch!ibt removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment