VirTool:Win32/Vbinder.CO removal tips

The VirTool:Win32/Vbinder.CO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What VirTool:Win32/Vbinder.CO virus can do?

• Executable code extraction
• Possible date expiration check, exits too soon after checking local time
• Creates RWX memory
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Anomalous binary characteristics

How to determine VirTool:Win32/Vbinder.CO?

File Info:
crc32: 5B171128md5: 0734394f1d28d25b9d6bb97b83c7498fname: 23062511.jpgsha1: 1601f9aeedd9ada184398ee8c3b223d9eed12047sha256: 499d59b5f31e8b25d8a4fcb32ceef5efd7fc8408efa2fc34bbebfbf6ce1d2e33sha512: e3d3b4462565285088e45e0c7cb14d2bd4fe234c6be4ac5826567f075032dbf1a567e828b784231512d079fa37ae61fb16ab5fdf9507506b1bb0c389552cbc4cssdeep: 24576:GR7YW+eTnCIk39UtGR1KIwGAnzeHi7YmJXFsoPvWZ:GNNGtUIXpw3nzeHE5Fso3Wtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

VirTool:Win32/Vbinder.CO also known as:

Bkav	W32.GenericBinderLnr.Trojan
MicroWorld-eScan	Dropped:Trojan.GenericKDZ.59687
CAT-QuickHeal	VirTool.Vbinder.CO5
McAfee	Trojan-FDDZ!0734394F1D28
Malwarebytes	HackTool.Binder
SUPERAntiSpyware	Trojan.Agent/Gen-Binder
K7AntiVirus	Trojan ( 004babd11 )
Alibaba	HackTool:Win32/Binder.3fc39518
K7GW	Trojan ( 004babd11 )
Cybereason	malicious.f1d28d
Invincea	heuristic
BitDefenderTheta	Gen:NN.ZexaF.32250.evW@aa@0JHiG
Cyren	W32/Backdoor.FVDJ-1096
Symantec	SMG.Heur!gen
TotalDefense	Win32/Tnega.AGBZ
Baidu	Win32.Trojan-Dropper.Binder.m
APEX	Malicious
ClamAV	Win.Trojan.Binder-6
Kaspersky	HackTool.Win32.Binder.bs
BitDefender	Dropped:Trojan.GenericKDZ.59687
Paloalto	generic.ml
Ad-Aware	Dropped:Trojan.GenericKDZ.59687
Emsisoft	Gen:Variant.Binder.1 (B)
Comodo	TrojWare.Win32.TrojanDropper.Binder.cls@4m6ovz
F-Secure	Trojan.TR/Kryptik.ybltb
DrWeb	Trojan.MulDrop2.39589
VIPRE	Trojan-Dropper.Win32.Binder.bs (v)
TrendMicro	TROJ_BINDER_FC1700C9.UVPA
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.0734394f1d28d25b
Sophos	Mal/Generic-S
SentinelOne	DFI – Malicious PE
F-Prot	W32/Backdoor2.HKXU
Jiangmin	HackTool.Binder.bh
Avira	TR/Kryptik.ybltb
MAX	malware (ai score=89)
Antiy-AVL	Trojan[PSW]/MSIL.Heye
Microsoft	VirTool:Win32/Vbinder.CO
Endgame	malicious (high confidence)
ViRobot	Trojan.Win32.A.Swisyn.49120
ZoneAlarm	HackTool.Win32.Binder.bs
GData	Win32.Trojan.Binder.A
AhnLab-V3	HackTool/Win32.Vbinder.R12127
Acronis	suspicious
VBA32	Binder.Celesty
ALYac	Dropped:Trojan.GenericKDZ.59687
Cylance	Unsafe
ESET-NOD32	Win32/TrojanDropper.Binder.NBH
TrendMicro-HouseCall	TROJ_BINDER_FC1700C9.UVPA
Rising	Dropper.Binder!1.AEB1 (CLASSIC)
Yandex	HackTool.Binder!IMtdREcP3/k
Ikarus	Trojan.Win32.Dorv
MaxSecure	HackTool.W32.Binder.bs
Fortinet	W32/Dropper.NBH!tr
AVG	FileRepMalware
CrowdStrike	win/malicious_confidence_90% (W)
Qihoo-360	Win32/Trojan.Hacktool.4af

How to remove VirTool:Win32/Vbinder.CO?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.