Categories: Malware

About “VirTool:Win32/VBInject.QM” infection

The VirTool:Win32/VBInject.QM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VirTool:Win32/VBInject.QM virus can do?

Behavioural detection: Executable code extraction – unpacking
Reads data out of its own binary image
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Behavioural detection: Injection (Process Hollowing)
Behavioural detection: Injection (inter-process)
Anomalous binary characteristics

How to determine VirTool:Win32/VBInject.QM?


File Info:
name: 95C7D726F3B0EB1318D5.mlwpath: /opt/CAPEv2/storage/binaries/15e376ee7dfcd6aa041ef43f9c730278ffdc42e0f45d2c086943e4d9465ee27acrc32: 783F6BBEmd5: 95c7d726f3b0eb1318d59dc693eca11csha1: e237d6eda1c26f562f4d47c6ddc601cd3c9b5919sha256: 15e376ee7dfcd6aa041ef43f9c730278ffdc42e0f45d2c086943e4d9465ee27asha512: e9ba89da47166af39c38209958e4b0c33110141720ff4270a5607d4bf969a021583e553fc8759b731b4bab21abd54cfff39b9ff27dab66c2ec1849bdfa50f60essdeep: 1536:m60NQNBW4DRpfDXYV9ivDFqBOyAEjaNr7Iuh9dA8pPd:mEVriovsBJa+GrNbtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T111A32A33FA156506F59544B02935A7EA34633C356E04AC0FFB44AB8D6478AC3BAF472Bsha3_384: 69f6ddfd97bad92bb1f3cabe09deda623b934a4d044b73e444309f18665ae2b38fd901785a320aa979b0d78dc9d2dda4ep_bytes: 6854194000e8eeffffff009000000000timestamp: 2011-03-08 18:20:30
Version Info:
Translation: 0x0409 0x04b0CompanyName: WinHost IncProductName: Remote ActionFileVersion: 3007.02.0093ProductVersion: 3007.02.0093InternalName: Copyright 2011OriginalFilename: Copyright 2011.dll

VirTool:Win32/VBInject.QM also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.VBKrypt.lmyS
Elastic	malicious (high confidence)
MicroWorld-eScan	Worm.Dorkbot.A
FireEye	Generic.mg.95c7d726f3b0eb13
Skyhigh	BehavesLike.Win32.Infected.ch
McAfee	Downloader-CNO.a
Cylance	unsafe
VIPRE	Worm.Dorkbot.A
Sangfor	Trojan.Win32.VBKrypt.V9p3
K7AntiVirus	Trojan ( 0050096a1 )
Alibaba	Trojan:Win32/VBKrypt.45dd9525
K7GW	Trojan ( 0050096a1 )
CrowdStrike	win/malicious_confidence_100% (W)
VirIT	Trojan.Win32.Generic.AXHV
Symantec	W32.IRCBot
tehtris	Generic.Malware
ESET-NOD32	Win32/StartPage.NYK
APEX	Malicious
TrendMicro-HouseCall	Mal_VBWrap
ClamAV	Win.Trojan.Menti-1697
Kaspersky	Trojan.Win32.VBKrypt.fgzq
BitDefender	Worm.Dorkbot.A
NANO-Antivirus	Trojan.Win32.Vb.byitw
Avast	Win32:VB-AAGW [Trj]
Tencent	Win32.Trojan.Vbkrypt.Ljgl
Emsisoft	Worm.Dorkbot.A (B)
Google	Detected
F-Secure	Trojan.TR/VB.abs
DrWeb	Win32.HLLW.Autoruner1.37622
Zillya	Trojan.Menti.Win32.642
TrendMicro	Mal_VBWrap
Trapmine	suspicious.low.ml.score
Sophos	Troj/Mdrop-DKO
Ikarus	Trojan.VB.Crypt
Jiangmin	Trojan/Menti.aip
Varist	W32/VB.DF.gen!Eldorado
Avira	TR/VB.abs
Antiy-AVL	Trojan/Win32.VB.avad
Kingsoft	Win32.Trojan.VBKrypt.fgzq
Microsoft	VirTool:Win32/VBInject.QM
Xcitium	TrojWare.Win32.Trojan.VB.~NAB@38pxvu
Arcabit	Worm.Dorkbot.A
ViRobot	Trojan.Win32.Menti.102400
ZoneAlarm	Trojan.Win32.VBKrypt.fgzq
GData	Win32.Trojan.Regat.B
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win32.Menti.R4051
VBA32	TScope.Trojan.VB
ALYac	Worm.Dorkbot.A
MAX	malware (ai score=100)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Genetic.gen
Rising	Trojan.Bagsu!8.3B1 (TFE:3:MaLnK5TZiMC)
Yandex	Trojan.GenAsa!npm5uhMrhkI
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.1931151.susgen
Fortinet	W32/Refroso.AGEA!tr
BitDefenderTheta	AI:Packer.1B36FC6820
AVG	Win32:VB-AAGW [Trj]
Cybereason	malicious.6f3b0e
DeepInstinct	MALICIOUS
alibabacloud	Trojan:Win/Injector.DCI