Should I remove “Trojan:Win32/VBInject.PKI!MTB”?

The Trojan:Win32/VBInject.PKI!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/VBInject.PKI!MTB virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan:Win32/VBInject.PKI!MTB?


File Info:
crc32: 78993605
md5: 331795ffdb6c9f6940d86d4a59c6180e
name: 331795FFDB6C9F6940D86D4A59C6180E.mlw
sha1: c7a383acd0fea19b35ce5e1ef784468ab0527e74
sha256: 5e74833e8f9a6e8a92cca35de25fb0d6b68c84d0bc22b9c939b51737acb83494
sha512: f92c8d6cb03130239a9386abaf768a7e97a2b1cbf1a36d01410b3096c8a4971d7624c06cd2a6e63abeb4941a6f0b4ee216b5faa51ca034145544807095a7f680
ssdeep: 1536:wLqAFgxItUWdbe489wm1ucOJZq2HDjmwaHKLzaOcMBnLn:wLqlxCUWdq9KFJ42HPjnLeOcMBnLn
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: Nexus Corporation
InternalName: brtspillenes
FileVersion: 4.00
CompanyName: Nexus Corporation
LegalTrademarks: Nexus Corporation
Comments: Nexus Corporation
ProductName: kvoteres
ProductVersion: 4.00
OriginalFilename: brtspillenes.exe

Trojan:Win32/VBInject.PKI!MTB also known as:

Elastic	malicious (high confidence)
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (W)
Cyren	W32/VB.TE.gen!Eldorado
ESET-NOD32	a variant of Win32/Injector.EPJA
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefenderTheta	Gen:NN.ZevbaF.34690.gm1@aSKmaNli
McAfee-GW-Edition	PWS-FCYQ!331795FFDB6C
FireEye	Generic.mg.331795ffdb6c9f69
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/VBInject.PKI!MTB
Malwarebytes	Malware.AI.644347329
Panda	Trj/GdSda.A
Rising	Trojan.Injector!8.C4 (TFE:5:1kbWEkcxU7D)

How to remove Trojan:Win32/VBInject.PKI!MTB?

Trojan:Win32/VBInject.PKI!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X