Virus:Win32/Vimm.A information

The Virus:Win32/Vimm.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Virus:Win32/Vimm.A virus can do?

Reads data out of its own binary image
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Attempts to identify installed AV products by registry key

How to determine Virus:Win32/Vimm.A?


File Info:
name: DB6D25B61AF14274DA0B.mlw
path: /opt/CAPEv2/storage/binaries/4770e6828f2696823075ff4620691ac7a46e0fa1fa57dc43096d8db53a147abd
crc32: 31700139
md5: db6d25b61af14274da0b1210926abd53
sha1: 4f6f3bca435ee48bd2f2ecd92601b9f8b9127f27
sha256: 4770e6828f2696823075ff4620691ac7a46e0fa1fa57dc43096d8db53a147abd
sha512: 796cb98b49e7833a54d06c5a7ab1ec2ac8be5bd67cac04d445fa31ed9eb99aee3bbc674fbac42e50df67d979dd55003e3bd26fa340cc054ad8fbfc1d2b812db4
ssdeep: 768:tCvEqdSUQg5pnlK0wAFZ60i0Gx40meS6E42Zg:88qYUQg5ff7c404t4p
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F5C26B5AE6D0CDF2C012CAFD4E59C25DAB3A32302E19C069B9A71FCDFE79252651C14B
sha3_384: 8dcdf08d5fc6bd32e2e2a35cd7cc38070d3f7ba0f3aa4adb6e59a9993a9bcd2a90e55690c180a71626ceb741bda9a44e
ep_bytes: 558becb9340000006a006a004975f953
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Virus:Win32/Vimm.A also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Doina.32297
ClamAV	Win.Trojan.Toffus-1
CAT-QuickHeal	W32.Vimm.A
ALYac	Gen:Variant.Doina.32297
Cylance	unsafe
Zillya	Virus.Toffus.Win32.1
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 004e66111 )
K7GW	Trojan ( 004e66111 )
Cybereason	malicious.61af14
Cyren	W32/Toffus.GUHR-2180
Symantec	Trojan Horse
Elastic	malicious (high confidence)
ESET-NOD32	Win32/TrojanDropper.Delf.NKE
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Virus.Win32.Toffus.a
BitDefender	Gen:Variant.Doina.32297
NANO-Antivirus	Trojan.Win32.Delf.pauds
Avast	Win32:Toffus
Tencent	Virus.Win32.Toffus.a
Emsisoft	Gen:Variant.Doina.32297 (B)
F-Secure	Malware.W32/Toffus.B
DrWeb	Win32.HLLP.Siggen.10
VIPRE	Gen:Variant.Doina.32297
TrendMicro	PE_TOFUS.A-O
McAfee-GW-Edition	BehavesLike.Win32.SpywareLyndra.mh
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.db6d25b61af14274
Sophos	ML/PE-A
Ikarus	VirTool.Win32.DelfInject
GData	Gen:Variant.Doina.32297
Jiangmin	Trojan/Toffus.a
Avira	W32/Toffus.B
Xcitium	TrojWare.Win32.TrojanDropper.Delf.NKE0@1ij892
Arcabit	Trojan.Doina.D7E29
ZoneAlarm	Virus.Win32.Toffus.a
Microsoft	Virus:Win32/Vimm.A
Google	Detected
AhnLab-V3	Win32/Toffus.A
McAfee	Dropper-FZT!DB6D25B61AF1
MAX	malware (ai score=80)
Malwarebytes	Malware.AI.3806692663
TrendMicro-HouseCall	PE_TOFUS.A-O
Rising	Trojan.Win32.KillAV.cpz (CLASSIC)
Yandex	Win32.Toffus.A
SentinelOne	Static AI – Suspicious PE
MaxSecure	Virus.W32.Toffus.A
Fortinet	W32/Toffus.A
BitDefenderTheta	Gen:NN.ZelphiF.36196.bGW@aGcg4mp
AVG	Win32:Toffus
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Virus:Win32/Vimm.A?

Virus:Win32/Vimm.A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X