Categories: Trojan

Should I remove “Trojan:Win32/Protob.B”?

The Trojan:Win32/Protob.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Protob.B virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
A process attempted to delay the analysis task.
Performs some HTTP requests
Unconventionial language used in binary resources: Spanish (Modern)
Sniffs keystrokes
Installs itself for autorun at Windows startup
Anomalous binary characteristics

Related domains:

www.shmyip.com

How to determine Trojan:Win32/Protob.B?


File Info:
crc32: 1C3CB45Cmd5: 9f2f86f41044caacdc156dab963f281aname: 9F2F86F41044CAACDC156DAB963F281A.mlwsha1: c3ea775625b607d9f761db7d15ecf607403f0fe4sha256: f11f2d4ff77a46677f36f4e86bde201e6e1112301e39063da3a08ca8c51ef074sha512: d3748c507a5b32de1abf99f453edc4455d828502839f20aae01d4d5a884746434a36c2c7a7aeaab4cc59dff41ca6818b7ff0defeb0a2f7c3531348b1c122e5f9ssdeep: 12288:zZ+KqH7zak7K0IXMBR6yrD7VORbCV/hWC:zji7zakIsR6yroRCV/hWCtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0c0a 0x04b0InternalName: STUBPFileVersion: 1.00.0410CompanyName: MicrosoftProductName: MicrosoftProductVersion: 1.00.0410OriginalFilename: STUBP.exe

Trojan:Win32/Protob.B also known as:

K7AntiVirus	NetWorm ( 700000151 )
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader35.49932
CAT-QuickHeal	Trojan.NetbotaMF.S21116285
ALYac	Gen:Trojan.Heur.Nm0@f99zOoR
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	NetWorm ( 700000151 )
Cybereason	malicious.41044c
Cyren	W32/Hupigon.D.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/VB.OPL
APEX	Malicious
Avast	Win32:DropperX-gen [Drp]
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Ransom.Win32.Blocker.msvu
BitDefender	Gen:Trojan.Heur.Nm0@f99zOoR
MicroWorld-eScan	Gen:Trojan.Heur.Nm0@f99zOoR
Ad-Aware	Gen:Trojan.Heur.Nm0@f99zOoR
Sophos	Mal/Generic-S
BitDefenderTheta	AI:Packer.DFC0442B1B
McAfee-GW-Edition	BehavesLike.Win32.Generic.jh
FireEye	Generic.mg.9f2f86f41044caac
Emsisoft	Gen:Trojan.Heur.Nm0@f99zOoR (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Dropper.Gen
Microsoft	Trojan:Win32/Protob.B
GData	Gen:Trojan.Heur.Nm0@f99zOoR
AhnLab-V3	Malware/Win32.RL_Generic.R298488
McAfee	Artemis!9F2F86F41044
MAX	malware (ai score=89)
VBA32	SScope.Malware-Cryptor.VBCR.2841
Panda	Trj/CI.A
Ikarus	Trojan.Win32.VB
AVG	Win32:DropperX-gen [Drp]