Trojan

Win32/TrojanClicker.VB.OBF removal guide

Malware Removal

The Win32/TrojanClicker.VB.OBF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/TrojanClicker.VB.OBF virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (4 unique times)
  • Performs some HTTP requests
  • Anomalous binary characteristics

Related domains:

adf.ly
usfinf.net
cdn.adf.ly
ocsp.digicert.com

How to determine Win32/TrojanClicker.VB.OBF?


File Info:

crc32: 3BBC9894
md5: 1364199a7625e7220a8481033bfc88d1
name: 1364199A7625E7220A8481033BFC88D1.mlw
sha1: 82e15f71a4cc7660547ba7412b0cb1191bac3656
sha256: 419bf7d2ed8133b9d26eee97cf5b78b00dbe48c6caf7e5e1bc158148b57de574
sha512: df1062aa5786df1ea1bbd8b0fd9b824cec7b3b72c28fd6f1dd7c02e031c4d12d4c9ad72a7e46a0c09950c17d186f82573641c5cdcf10c08722214edd4ecb2630
ssdeep: 768:ec0nFY36kONFVtJhg/w1z908xD6ejB4Y4O1F:h0FYbONFVtJhg/w1z908xD6ejeEL
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
LegalCopyright: tindl88@yahoo.com
InternalName: Clicker
FileVersion: 1.00
CompanyName: TiN
LegalTrademarks: tindl88@yahoo.com
Comments: Auto Click
ProductName: Auto Click
ProductVersion: 1.00
FileDescription: Auto Click
OriginalFilename: Clicker.exe

Win32/TrojanClicker.VB.OBF also known as:

K7AntiVirusSpyware ( 004cac3f1 )
LionicTrojan.Win32.Generic.4!c
CylanceUnsafe
SangforTrojan.Win32.Agent.gen
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/TrojanClicker.VB.OBF
APEXMalicious
AvastWin32:Trojan-gen
ViRobotTrojan.Win32.Z.Agent.49152.HAL
VIPRETrojan.Win32.Generic.pak!cobra
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.Agent.ipt
WebrootW32.Malware.Gen
MicrosoftTrojan:Win32/Skeeyah.A!MTB
McAfeeArtemis!1364199A7625
TrendMicro-HouseCallTROJ_GEN.R002H0CJM21
YandexTrojan.GenAsa!3eJfCCy4+zg
IkarusTrojan-Downloader.VB
MaxSecureTrojan.Malware.7175209.susgen
FortinetW32/TrojanClicker_VB.OBF!tr
AVGWin32:Trojan-gen

How to remove Win32/TrojanClicker.VB.OBF?

Win32/TrojanClicker.VB.OBF removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment