Malware

About “VirTool:Win32/Vbinder.CQ” infection

Malware Removal

The VirTool:Win32/Vbinder.CQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What VirTool:Win32/Vbinder.CQ virus can do?

  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine VirTool:Win32/Vbinder.CQ?



File Info:

name: D4ECFDA4A5776A9ACFC5.mlw
path: /opt/CAPEv2/storage/binaries/623507b3886cec22d2af63c251f061f3c5808831c3fe21a1d429367330227ea7
crc32: CC3B680B
md5: d4ecfda4a5776a9acfc5e7ff9e70ed27
sha1: 5ecaf7f31198f418a4386807495417a0dfc3ea0a
sha256: 623507b3886cec22d2af63c251f061f3c5808831c3fe21a1d429367330227ea7
sha512: b304656911c37e43edbba71b4fe00b05bbc1400651a5252594e90f6452389e9e2a9e454ce8fd64bb3b4365502eaec5de6ee85dc61a37dd772bd8384adea4162e
ssdeep: 6144:D3aPGH0U6Pr7FXlbWc3PuV/rvGXUf39GZjJ21OhCJiviq2YWDppQ7fQ:D3SPr7FXlbWc3PuV/r+XUf39GZjJ21OE
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14714C62E7260A73AF465C6F52C6E8398046E6D3A35C4A447FBC22B1572F1DF39122763
sha3_384: 36e5bc6e137aca569535ec6a1ab020e29358d53f64eb99d0b8886ca611f17f41d867b79d7f0e416e80f78a12a63be466
ep_bytes: 68143c4000e8eeffffff000000000000
timestamp: 2012-01-31 06:13:54


Version Info:

Translation: 0x0409 0x04b0
ProductName: LikcvXAj
FileVersion: 1.00
ProductVersion: 1.00
InternalName: LiHyenIv
OriginalFilename: LiHyenIv.exe

VirTool:Win32/Vbinder.CQ also known as:

BkavW32.AIDetectMalware
LionicWorm.Win32.WBNA.lIOe
tehtrisGeneric.Malware
MicroWorld-eScanTrojan.GenericKDZ.95848
ClamAVWin.Trojan.VB-1683
FireEyeTrojan.GenericKDZ.95848
ALYacTrojan.GenericKDZ.95848
Cylanceunsafe
ZillyaTrojan.Jorik.Win32.427235
SangforSuspicious.Win32.Save.vb
K7AntiVirusEmailWorm ( 0054d10f1 )
AlibabaMalware:Win32/km_2ff7.None
K7GWEmailWorm ( 0054d10f1 )
Cybereasonmalicious.31198f
VirITTrojan.Win32.Zyx.HS
CyrenW32/Vobfus.AI.gen!Eldorado
SymantecW32.Changeup!gen15
Elasticmalicious (high confidence)
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Jorik.Vobfus.gtpr
BitDefenderTrojan.GenericKDZ.95848
ViRobotTrojan.Win32.A.VBKrypt.200704.BU
AvastWin32:Crypto-BJ [Trj]
TencentTrojan.Win32.Jorik.hl
TACHYONTrojan/W32.Jorik.200704
EmsisoftTrojan.GenericKDZ.95848 (B)
BaiduWin32.Worm.Pronny.d
F-SecureTrojan.TR/VB.Krypt.jcirnc
DrWebWorm.Siggen.10019
VIPRETrojan.GenericKDZ.95848
TrendMicroWORM_VOBFUS.SMAB
McAfee-GW-EditionBehavesLike.Win32.VBObfus.cm
SophosW32/SillyFDC-HE
SentinelOneStatic AI – Malicious PE
GDataTrojan.GenericKDZ.95848
JiangminTrojan.Jorik.amba
AviraTR/VB.Krypt.jcirnc
Antiy-AVLWorm/Win32.WBNA.gen
XcitiumWorm.Win32.AutoRun.AMH@4owee9
ArcabitTrojan.Generic.D17668
SUPERAntiSpywareTrojan.Agent/Gen-Vobfus
ZoneAlarmTrojan.Win32.Jorik.Vobfus.gtpr
MicrosoftVirTool:Win32/Vbinder.CQ
GoogleDetected
AhnLab-V3Trojan/Win32.VBKrypt.R20353
McAfeeVBObfus.df
MAXmalware (ai score=86)
MalwarebytesGeneric.Worm.AutoRun.DDS
PandaW32/Vobfus.GEW.worm
TrendMicro-HouseCallWORM_VOBFUS.SMAB
RisingWorm.VobfusEx!1.99DB (CLASSIC)
YandexWorm.VBAutorun.Gen!Pac.2
IkarusVirus.Win32.Injector
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Generic.AC.3A08!tr
AVGWin32:Crypto-BJ [Trj]
DeepInstinctMALICIOUS

How to remove VirTool:Win32/Vbinder.CQ?

VirTool:Win32/Vbinder.CQ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment