Should I remove “Trojan:Win32/Vbcrypt!ic”?

The Trojan:Win32/Vbcrypt!ic is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Vbcrypt!ic virus can do?

Behavioural detection: Executable code extraction – unpacking
Authenticode signature is invalid

How to determine Trojan:Win32/Vbcrypt!ic?


File Info:
name: 5BC9361E183DFE1CDB57.mlw
path: /opt/CAPEv2/storage/binaries/c184f601b77a23b2b396ab752979d2891c3c389c3702ee553aacb9908070da05
crc32: D2961847
md5: 5bc9361e183dfe1cdb57e078cbd0a182
sha1: 3863ac6a212f0aa1dfe3242de92a57d05d63845e
sha256: c184f601b77a23b2b396ab752979d2891c3c389c3702ee553aacb9908070da05
sha512: 13d3a8a1633eb2243cc40434e657f57f13073287d8561cefd268c61611d44525f2f4d9ca4911b7479967e364708c6306f528bf3eb52bafdedb8e90f8330bf413
ssdeep: 1536:/1JT8x37Ksd5TWtDSauwhwB39NQAIX8g7yEWEqEbETa+MkrYvoo:gKsd5TWtDSa5wBNCAIsg7yL3O/+ko
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BF53097B7948E177E42084714A9D61E6F562AC222421FC0EB3C76F9E8E765C364E422F
sha3_384: 3e724a9ffdb6f36051092bd1011ca49c9ed8c55b17abc7cc1563912d5185dfcd56366de06b74d74da419cc7a3fe80805
ep_bytes: 681c154000e8f0ffffff000000000000
timestamp: 2012-01-05 23:01:40

Version Info:
Translation: 0x0409 0x04b0
CompanyName: pFRcsIomHwmOY
FileDescription: DqYpDuPVIDeS
LegalCopyright: pFRcsIomHwmOY
LegalTrademarks: pFRcsIomHwmOY
ProductName: xSvjyZHIHS
FileVersion: 0.89.0011
ProductVersion: 0.89.0011
InternalName: cglmnjgzkpdsmupqfrduni
OriginalFilename: cglmnjgzkpdsmupqfrduni.exe

Trojan:Win32/Vbcrypt!ic also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
DrWeb	Worm.Siggen.5400
MicroWorld-eScan	Gen:Heur.Conjar.1
FireEye	Generic.mg.5bc9361e183dfe1c
Skyhigh	BehavesLike.Win32.Infected.kt
McAfee	GenericRXAA-AA!5BC9361E183D
Malwarebytes	Generic.Malware/Suspicious
Sangfor	Spyware.Win32.Vbcrypt.Vtnb
K7AntiVirus	NetWorm ( 700000151 )
K7GW	NetWorm ( 700000151 )
Arcabit	Trojan.Conjar.1
BitDefenderTheta	AI:Packer.1596C5CA1F
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Spy.Bancos.OIX
Cynet	Malicious (score: 100)
APEX	Malicious
Kaspersky	Trojan.Win32.VB.cfqq
BitDefender	Gen:Heur.Conjar.1
Avast	Win32:VBCrypt-EK [Trj]
Tencent	Win32.Trojan.Vb.Vylw
Emsisoft	Gen:Heur.Conjar.1 (B)
F-Secure	Trojan.TR/Dropper.VB.Gen
VIPRE	Gen:Heur.Conjar.1
Sophos	Mal/VB-ABHH
Ikarus	Trojan.SuspectCRC
Jiangmin	Trojan.VB.yoe
Varist	W32/VBTrojan.Vobfus.2!Generic
Avira	TR/Dropper.VB.Gen
Antiy-AVL	Trojan[Spy]/Win32.Bancos
Kingsoft	Win32.Trojan.Generic.a
Microsoft	Trojan:Win32/Vbcrypt!ic
ZoneAlarm	Trojan.Win32.VB.cfqq
GData	Gen:Heur.Conjar.1
Google	Detected
AhnLab-V3	Trojan/Win32.VBKrypt.R16924
VBA32	TScope.Trojan.VB
MAX	malware (ai score=88)
Cylance	unsafe
Rising	Spyware.Bancos!8.2F8 (TFE:5:7Y5eKDpcJIF)
Yandex	Trojan.GenAsa!MAb3VRydlb8
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:VBCrypt-EK [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (D)

How to remove Trojan:Win32/Vbcrypt!ic?

Trojan:Win32/Vbcrypt!ic removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X