Win32/TrojanClicker.VB.OEM removal guide

The Win32/TrojanClicker.VB.OEM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanClicker.VB.OEM virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (6 unique times)
Reads data out of its own binary image
Performs some HTTP requests
Sniffs keystrokes
Steals private information from local Internet browsers
Installs itself for autorun at Windows startup
Attempts to modify browser security settings
Attempts to modify UAC prompt behavior
Anomalous binary characteristics

Related domains:

ocsp.pki.goog

www.gstatic.com

fonts.gstatic.com

playboy365.net

g2.symcb.com

vassg142.ocsp.omniroot.com

How to determine Win32/TrojanClicker.VB.OEM?


File Info:
crc32: 47EEBFC2
md5: 16bae5afad01a2b90078c04b1b87c378
name: 16BAE5AFAD01A2B90078C04B1B87C378.mlw
sha1: e79c8f491ba8ea6a847d2f81ad6e0549b4984c21
sha256: 2cf2765e989ce0639ae1e29f712d80f4d16e0063d5a36ff404a93c5274187ddb
sha512: 1f800dbd46531cb3339dd935a1d49ddb7f96a29bdfb123c5af552e756667d63ed9cfa60d184e77d3efbf4c39c8a205cf1ad75a4d66cc79f697eedd3f214110c1
ssdeep: 6144:cd/+lA+8x6P7IASzAIEG7Dt5KND2bO6ZjQI1XcvXAvSHe03:wmlA+8x6P7IASzAIEG7Dt5KND2bO6Zj
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: Project1
FileVersion: 1.00
CompanyName: CloudFlare LTD
ProductName: Project1
ProductVersion: 1.00
OriginalFilename: Project1.exe

Win32/TrojanClicker.VB.OEM also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Multi.Generic.4!c
Cylance	Unsafe
Zillya	Trojan.VB.Win32.153954
Sangfor	Trojan.Win32.Clicker-VB.8
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanClicker.VB.OEM
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Generic-9835979-0
Kaspersky	UDS:DangerousObject.Multi.Generic
NANO-Antivirus	Trojan.Win32.Kazy.czqozq
Sophos	ML/PE-A
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Fareit.dt
FireEye	Generic.mg.16bae5afad01a2b9
SentinelOne	Static AI – Suspicious PE
Avira	TR/Kazy.384196
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.A2748A
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	UDS:DangerousObject.Multi.Generic
McAfee	Artemis!16BAE5AFAD01
Yandex	Trojan.Kazy!BhamGBYHtqo
Ikarus	Trojan-Downloader.Win32.Bancos
Fortinet	W32/TrojanClicker_VB.OEM!tr
AVG	Win32:Malware-gen

How to remove Win32/TrojanClicker.VB.OEM?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/TrojanClicker.VB.OEM removal guide