Categories: Trojan

Win32/TrojanClicker.VB.OEM removal guide

The Win32/TrojanClicker.VB.OEM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanClicker.VB.OEM virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (6 unique times)
Reads data out of its own binary image
Performs some HTTP requests
Sniffs keystrokes
Steals private information from local Internet browsers
Installs itself for autorun at Windows startup
Attempts to modify browser security settings
Attempts to modify UAC prompt behavior
Anomalous binary characteristics

Related domains:

ocsp.pki.goog

www.gstatic.com

fonts.gstatic.com

playboy365.net

g2.symcb.com

vassg142.ocsp.omniroot.com

How to determine Win32/TrojanClicker.VB.OEM?


File Info:
crc32: 47EEBFC2md5: 16bae5afad01a2b90078c04b1b87c378name: 16BAE5AFAD01A2B90078C04B1B87C378.mlwsha1: e79c8f491ba8ea6a847d2f81ad6e0549b4984c21sha256: 2cf2765e989ce0639ae1e29f712d80f4d16e0063d5a36ff404a93c5274187ddbsha512: 1f800dbd46531cb3339dd935a1d49ddb7f96a29bdfb123c5af552e756667d63ed9cfa60d184e77d3efbf4c39c8a205cf1ad75a4d66cc79f697eedd3f214110c1ssdeep: 6144:cd/+lA+8x6P7IASzAIEG7Dt5KND2bO6ZjQI1XcvXAvSHe03:wmlA+8x6P7IASzAIEG7Dt5KND2bO6Zjtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0409 0x04b0InternalName: Project1FileVersion: 1.00CompanyName: CloudFlare LTDProductName: Project1ProductVersion: 1.00OriginalFilename: Project1.exe

Win32/TrojanClicker.VB.OEM also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Multi.Generic.4!c
Cylance	Unsafe
Zillya	Trojan.VB.Win32.153954
Sangfor	Trojan.Win32.Clicker-VB.8
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanClicker.VB.OEM
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Generic-9835979-0
Kaspersky	UDS:DangerousObject.Multi.Generic
NANO-Antivirus	Trojan.Win32.Kazy.czqozq
Sophos	ML/PE-A
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Fareit.dt
FireEye	Generic.mg.16bae5afad01a2b9
SentinelOne	Static AI – Suspicious PE
Avira	TR/Kazy.384196
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.A2748A
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	UDS:DangerousObject.Multi.Generic
McAfee	Artemis!16BAE5AFAD01
Yandex	Trojan.Kazy!BhamGBYHtqo
Ikarus	Trojan-Downloader.Win32.Bancos
Fortinet	W32/TrojanClicker_VB.OEM!tr
AVG	Win32:Malware-gen