Categories: Trojan

VHO:Trojan-Banker.MSIL.BitStealer removal guide

The VHO:Trojan-Banker.MSIL.BitStealer is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VHO:Trojan-Banker.MSIL.BitStealer virus can do?

Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine VHO:Trojan-Banker.MSIL.BitStealer?


File Info:
crc32: A5531172md5: 0c7d32191714797fa45b270492906678name: 0C7D32191714797FA45B270492906678.mlwsha1: 52eec7e8d2170f474aaa06b2bac8c09c5e063603sha256: 86692897f96aa1f541fca125ec6f1c20c1cf8e718e2baf20f8f03860f06b134bsha512: e355b7884feeb4c414dea19dd23b25ff6e618c7ee13f265086877237c61139e4b6bf617a1febec61f928f9830e3b5fab3e777cfd4fe43dfae578123f698985bbssdeep: 6144:BMgYS0arrQFMTTDTL+ght9G9/YzfdRAK+UduZRqRG2paPv25Mn7KmsBQ7gQ8:BirATVhXG9qdV+TaCv25Mn7KjUtype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
0: [No Data]

VHO:Trojan-Banker.MSIL.BitStealer also known as:

K7AntiVirus	Trojan ( 700000121 )
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop6.38561
CAT-QuickHeal	PUA.GenericFC.S7082989
ALYac	Generic.MSIL.Ransomware.Jigsaw.97AB8B37
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (D)
Alibaba	TrojanSpy:MSIL/CoinStealer.3ccca6de
K7GW	Trojan ( 700000121 )
Cybereason	malicious.917147
ESET-NOD32	a variant of MSIL/PSW.CoinStealer.AH
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
ClamAV	Win.Trojan.SatoshiBypass-6853426-0
Kaspersky	VHO:Trojan-Banker.MSIL.BitStealer.gen
BitDefender	Generic.MSIL.Ransomware.Jigsaw.97AB8B37
MicroWorld-eScan	Generic.MSIL.Ransomware.Jigsaw.97AB8B37
Tencent	Malware.Win32.Gencirc.10c9c2b5
Ad-Aware	Generic.MSIL.Ransomware.Jigsaw.97AB8B37
Sophos	Mal/Generic-R + Troj/Jigsaw-K
BitDefenderTheta	Gen:NN.ZemsilF.34692.AmW@a0ZfZt
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	GenericRXBK-OL!0C7D32191714
FireEye	Generic.mg.0c7d32191714797f
Emsisoft	Generic.MSIL.Ransomware.Jigsaw.97AB8B37 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Generic.chfbt
eGambit	Unsafe.AI_Score_100%
Antiy-AVL	Trojan/Generic.ASMalwS.26C195E
Microsoft	TrojanSpy:MSIL/CoinStealer.C!bit
GData	MSIL.Trojan.ClipBanker.C
McAfee	GenericRXBK-OL!0C7D32191714
MAX	malware (ai score=82)
VBA32	Trojan.MSIL.gen.11
Malwarebytes	Spyware.BTCStealer
Rising	Ransom.JigsawLocker!8.52DD (C64:YzY0Osh0VGhleOze)
Yandex	Trojan.Agent!/6iV9/Zp3HE
Ikarus	Trojan.MSIL.PSW
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Jigsaw.K!tr
AVG	Win32:PWSX-gen [Trj]