Trojan:Win32/Veslorn!A removal tips

The Trojan:Win32/Veslorn!A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Veslorn!A virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Drops a binary and executes it
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Uses Windows utilities for basic functionality
Deletes its original binary from disk
Installs itself for autorun at Windows startup
Creates a copy of itself
Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan:Win32/Veslorn!A?


File Info:
crc32: 5B9D6374
md5: 3a4c6a7c174691b747b22abeebe6be21
name: 3A4C6A7C174691B747B22ABEEBE6BE21.mlw
sha1: 416ce6a7a2d5d84199eff439dc4c83e7f67bbfa0
sha256: 7e8fe05586b74995acbf4456cab75cb51cdab53e6cc567f5db5f88a88a6ddd72
sha512: d2945edfc2f330aa48a549e5dfa1d6737874a9f976c54ae1da2430324bee570bc20227df086c5ac5a150bd3a073b6372374465e17f379fa4904f234dbacf666e
ssdeep: 768:m/U71z02mfeXxsmlNqhCPBlDWQenbcuyD7UKf:1V02P9NqhKbD9enouy8Kf
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: 
InternalName: 
FileVersion: 
CompanyName: 
PrivateBuild: 
LegalTrademarks: 
Comments: 
ProductName: 
SpecialBuild: 
ProductVersion: 
FileDescription: 
OriginalFilename: 
Translation: 0x0804 0x04b0

Trojan:Win32/Veslorn!A also known as:

K7AntiVirus	Trojan ( 004cc7e21 )
Lionic	Trojan.Win32.Ceckno.m!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Rincux.AW
CMC	Generic.Win32.3a4c6a7c17!CMCRadar
ALYac	Trojan.Rincux.AW
Cylance	Unsafe
Zillya	Trojan.Ceckno.Win32.143
Sangfor	Trojan.Win32.Veslorn.gen
CrowdStrike	win/malicious_confidence_60% (D)
Alibaba	Trojan:Win32/Veslorn.04a193ae
K7GW	Trojan ( 004cc7e21 )
Cybereason	malicious.c17469
Cyren	W32/Downloader.I.gen!Eldorado
Symantec	Backdoor.Trojan
ESET-NOD32	Win32/Ceckno.DL
APEX	Malicious
Avast	FileRepMalware
Cynet	Malicious (score: 100)
Kaspersky	Packed.Win32.Krap.g
BitDefender	Trojan.Rincux.AW
NANO-Antivirus	Trojan.Win32.Krap.devjxr
Tencent	Win32.Packed.Krap.Lkee
Ad-Aware	Trojan.Rincux.AW
Sophos	Mal/Behav-010
Comodo	Backdoor@#2d7h023btrduz
DrWeb	BackDoor.Attack.22
VIPRE	Trojan.Win32.Generic.pak!cobra
TrendMicro	TROJ_VESLORN.EE
McAfee-GW-Edition	generic!bg.esp
FireEye	Generic.mg.3a4c6a7c174691b7
Emsisoft	Trojan.Rincux.AW (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Backdoor/Ceckno.ach
Webroot	W32.Malware.Gen
Avira	TR/Downloader.Gen
eGambit	Generic.Malware
Antiy-AVL	Trojan/Generic.ASMalwS.1026AC7
Kingsoft	Win32.Troj.Krap.g.(kcloud)
Microsoft	Trojan:Win32/Veslorn.gen!A
SUPERAntiSpyware	Trojan.Agent/Gen-Peed
ZoneAlarm	Packed.Win32.Krap.g
GData	Trojan.Rincux.AW
AhnLab-V3	Packed/Win32.Krap.C137513
Acronis	suspicious
McAfee	generic!bg.esp
MAX	malware (ai score=100)
VBA32	BScope.Backdoor.Attack
Panda	Bck/Ceckno.H
TrendMicro-HouseCall	TROJ_VESLORN.EE
Rising	Backdoor.Agent!1.6628 (CLASSIC)
Yandex	Trojan.GenAsa!+KtR5pr/yGk
Ikarus	Backdoor.Win32.Ceckno
MaxSecure	Trojan.Malware.749424.susgen
Fortinet	W32/CoinMiner.BELF!tr
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Trojan:Win32/Veslorn!A?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan:Win32/Veslorn!A removal tips