Trojan

Trojan:Win32/Vrodirb.B information

Malware Removal

The Trojan:Win32/Vrodirb.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Vrodirb.B virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Trojan:Win32/Vrodirb.B?


File Info:

name: 487CFBBF33974D49AECB.mlw
path: /opt/CAPEv2/storage/binaries/ecfe7914ec625a522fedfbdfa36546cd060ba492402f27c55a75431f8ccef497
crc32: B425CF45
md5: 487cfbbf33974d49aecb934994bb1e6f
sha1: 4abf00ad97f7e0fdadf0ac3da4fe1ab15647038b
sha256: ecfe7914ec625a522fedfbdfa36546cd060ba492402f27c55a75431f8ccef497
sha512: 5acf8a34c71291e17210935201c8130f521ac26fb0e8ea5b635f9a954bb0bc3be20f699bf80ac58b63da14ba24276f02b6c2616fb3c2ea7e1d59421d87d220e7
ssdeep: 768:8s8CH9bDrGMW32uOtzF6bWvm6tOoofMQTkaq:84YMW32rzFM+hoHF
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T10B133A376A6DC271F26196B95C96A378CF5E32314C20D5F5AFE00DCC8C596E2AD2C21B
sha3_384: 7e2b28b66a2653797195485205b7fce655e1303abe57ab4799e5b5eedd326670b04d758bca9c19fa7c57d9c1a007a208
ep_bytes: 558bec83c4c05333c08945c0b8bc8040
timestamp: 1992-06-19 22:22:17

Version Info:

0: [No Data]

Trojan:Win32/Vrodirb.B also known as:

LionicWorm.Win32.AutoRun.o!c
DrWebTrojan.Click.64510
MicroWorld-eScanGen:Variant.Barys.367700
FireEyeGeneric.mg.487cfbbf33974d49
SkyhighBehavesLike.Win32.PWSLineage.ph
McAfeeGenericRXGI-EK!487CFBBF3397
Cylanceunsafe
ZillyaWorm.AutoRun.Win32.36304
SangforTrojan.Win32.Save.a
AlibabaWorm:Win32/AutoRun.313469e3
K7GWP2PWorm ( 0055e3e51 )
K7AntiVirusP2PWorm ( 0055e3e51 )
VirITWorm.Win32.Generic.HLK
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/AutoRun.Delf.KX
TrendMicro-HouseCallTROJ_GEN.R002C0CAP24
AvastWin32:Trojan-gen
ClamAVWin.Malware.Zusy-9838522-0
KasperskyWorm.Win32.AutoRun.cljt
BitDefenderGen:Variant.Barys.367700
NANO-AntivirusTrojan.Win32.Click.cyhygr
TencentTrojan.Win32.VB.bac
EmsisoftGen:Variant.Barys.367700 (B)
F-SecureTrojan.TR/ATRAPS.Gen
BaiduWin32.Trojan.Delf.it
VIPREGen:Variant.Barys.367700
TrendMicroTROJ_GEN.R002C0CAP24
SophosMal/Generic-S
IkarusWorm.Win32.Mocmex
JiangminWorm/AutoRun.acaa
WebrootW32.Malware.Gen
GoogleDetected
AviraTR/ATRAPS.Gen
KingsoftWin32.Worm.AutoRun.cljt
MicrosoftTrojan:Win32/Vrodirb.B
XcitiumTrojWare.Win32.StartPage.rmm@4t7y72
ArcabitTrojan.Barys.D59C54
ViRobotWorm.Win32.Autorun.65536.S
ZoneAlarmWorm.Win32.AutoRun.cljt
GDataGen:Variant.Barys.367700
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Downloader.R10809
VBA32BScope.TrojanDownloader.Banload
ALYacGen:Variant.Barys.367700
MalwarebytesMalware.AI.1805204334
PandaGeneric Malware
RisingTrojan.Generic@AI.99 (RDMK:2PNDwHQ+C2AC3RNMAXzdqg)
YandexWorm.AutoRun!PJOcc6Jqujc
MaxSecureTrojan.Malware.2310656.susgen
FortinetW32/AutoRun.KX!worm
AVGWin32:Trojan-gen
DeepInstinctMALICIOUS
alibabacloudTrojan[dropper]:Win/Delphi

How to remove Trojan:Win32/Vrodirb.B?

Trojan:Win32/Vrodirb.B removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment