What is “Trojan:Win32/VB.GQ”?

The Trojan:Win32/VB.GQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/VB.GQ virus can do?

Behavioural detection: Executable code extraction – unpacking
Unconventionial language used in binary resources: Spanish (Modern)
Authenticode signature is invalid

How to determine Trojan:Win32/VB.GQ?


File Info:
name: 37337FCB1E159BF4C4CD.mlw
path: /opt/CAPEv2/storage/binaries/c0b3a060ac6f42855d215b478bf6c01d0f954b368c12b0f0164fb9d269abf2dc
crc32: DD7A6C6B
md5: 37337fcb1e159bf4c4cdbbb9d123b020
sha1: c019ee05eeccdc87c88c7e7132d2d8c79b3fc78b
sha256: c0b3a060ac6f42855d215b478bf6c01d0f954b368c12b0f0164fb9d269abf2dc
sha512: bdb7db9b4dfe41cf824f05307c81e0fced97c346e8e8bbd8191737ebef23da018f59ab510199b6e6c774250aa5c73f234df64231e17d09d0cc74386a119addd8
ssdeep: 384:1XcJhKD25guXvrEd2mYeTbPL41WAKnS2PlbQ1u6wa4wJQsnwh0eWD0MgMyD0W44o:JcJVggmDvqFKLep4SI0eW4bik1
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T145237103FAAC0141F7A54A304C329EA61936FE16D831AE5A63A5BE1D5D71E03EDB431F
sha3_384: 06511c2bf2707a32678f30071a50943a8d8e8ae8ad3da29423f64e06d7372d424efca37d8c92c38d7357a76f6b570eb1
ep_bytes: 68202b4000e8eeffffff000000000000
timestamp: 2004-03-16 02:05:34

Version Info:
Translation: 0x0c0a 0x04b0
Comments: Documento de Microsoft Word.  Feliz "2004" para todos.
CompanyName: MLHR corporation
FileDescription: Documento de Microsoft Word
LegalCopyright: (c) 2003-2004
ProductName: Winlogon
FileVersion: 1.00.0001
ProductVersion: 1.00.0001
InternalName: Base de datos
OriginalFilename: Base de datos.exe

Trojan:Win32/VB.GQ also known as:

Lionic	Trojan.Win32.VB.lgzy
DrWeb	Trojan.Mejida
MicroWorld-eScan	Gen:Trojan.Heur.dm0@s1BqGfHaf
FireEye	Gen:Trojan.Heur.dm0@s1BqGfHaf
CAT-QuickHeal	Trojan.Agent
Skyhigh	W32/Generic.p!floppy
McAfee	W32/Generic.p!floppy
Cylance	unsafe
VIPRE	Gen:Trojan.Heur.dm0@s1BqGfHaf
Sangfor	Suspicious.Win32.Save.vb
K7AntiVirus	P2PWorm ( 0055e3ea1 )
Alibaba	Trojan:Win32/SillyTrojan.88834c06
K7GW	P2PWorm ( 0055e3ea1 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Heur.E19F4A
BitDefenderTheta	AI:Packer.BB045E0C1D
VirIT	Worm.Win32.VB.GV
Symantec	W32.Windang.A
Elastic	malicious (high confidence)
ESET-NOD32	Win32/VB.GQ
Cynet	Malicious (score: 100)
ClamAV	Win.Trojan.Windang-1
Kaspersky	Trojan.Win32.VB.gq
BitDefender	Gen:Trojan.Heur.dm0@s1BqGfHaf
NANO-Antivirus	Virus.Win32.HLLP.ggxn
Avast	Win32:Trojano-CZN [Trj]
Tencent	Trojan.Win32.VB.mja
Sophos	Troj/VB-EJ
F-Secure	Trojan.TR/VB.GQ
Zillya	Trojan.VB.Win32.13
TrendMicro	TROJ_VB.GQ
Emsisoft	Gen:Trojan.Heur.dm0@s1BqGfHaf (B)
Jiangmin	Trojan/VB.Arms
Webroot	Trojan:Win32/VB.GQ
Varist	W32/Trojan.ZBVY-7535
Avira	TR/VB.GQ
Antiy-AVL	Virus/Win32.VB.gc
Kingsoft	Win32.HeurC.KVM007.a
Xcitium	TrojWare.Win32.VB.GQ@4h7j
Microsoft	Trojan:Win32/VB.GQ
ViRobot	Trojan.Win32.VB.49152.J
ZoneAlarm	Trojan.Win32.VB.gq
GData	Gen:Trojan.Heur.dm0@s1BqGfHaf
Google	Detected
AhnLab-V3	Worm/Win32.Windang.R37479
VBA32	Trojan.VB
ALYac	Gen:Trojan.Heur.dm0@s1BqGfHaf
MAX	malware (ai score=100)
Malwarebytes	Generic.Malware.AI.DDS
Panda	W32/Loulod.A.worm
TrendMicro-HouseCall	TROJ_VB.GQ
Rising	Trojan.VB.fz (CLASSIC)
Ikarus	Virus.Win32.HLLP.VB
MaxSecure	Virus.W32.HLLW.Windang
Fortinet	W32/VB.EJ!tr
AVG	Win32:Trojano-CZN [Trj]
DeepInstinct	MALICIOUS

How to remove Trojan:Win32/VB.GQ?

Trojan:Win32/VB.GQ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X