Categories: Trojan

Win32/TrojanDownloader.VB.RIR removal instruction

The Win32/TrojanDownloader.VB.RIR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanDownloader.VB.RIR virus can do?

Executable code extraction
Network anomalies occured during the analysis.
A process created a hidden window
Uses Windows utilities for basic functionality
Generates some ICMP traffic
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/TrojanDownloader.VB.RIR?


File Info:
crc32: E1364AADmd5: 9f74df24690e764f655e99f7cb3403bfname: 9F74DF24690E764F655E99F7CB3403BF.mlwsha1: f3cbd4ae654b7f1f15617131ecb5ce9aa38b061dsha256: c889542a87b36c0465db6786d12b735255f0fd7d63bf1452760c9545ecd9b812sha512: 947c855917d8ffccc56dec3a60746986e8b8f779ed3cc7f63e6c1616ab09862a9b95918fadde9def09ddbf9c10a3a4b2966154d6e82965ed571f9685662d4c98ssdeep: 192:bpbpEzmlLwNyvyq/vCViw15u28JiK/ta+reI:bhWqwkF/vCViw7u28J3laceItype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0409 0x04b0ProductVersion: 1.00InternalName: Project1FileVersion: 1.00OriginalFilename: Project1.exeProductName: Project1

Win32/TrojanDownloader.VB.RIR also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan-Downloader ( 0054851e1 )
DrWeb	Trojan.Siggen8.13833
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.31743768
Alibaba	TrojanDownloader:Win32/Alien.130f13d5
K7GW	Trojan-Downloader ( 0054851e1 )
Cybereason	malicious.4690e7
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanDownloader.VB.RIR
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.GenericKD.31743768
NANO-Antivirus	Trojan.Win32.Alien.fnvpxb
MicroWorld-eScan	Trojan.GenericKD.31743768
Tencent	Win32.Trojan.Alien.Hwwi
Ad-Aware	Trojan.GenericKD.31743768
Sophos	Mal/Generic-S
Comodo	Malware@#1jc9rxm2qv43k
BitDefenderTheta	Gen:NN.ZevbaF.34170.bm0@a8yrF!fi
McAfee-GW-Edition	BehavesLike.Win32.Trojan.mz
FireEye	Generic.mg.9f74df24690e764f
Emsisoft	Trojan.GenericKD.31743768 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Alien.ci
Avira	HEUR/AGEN.1138254
eGambit	Unsafe.AI_Score_98%
Antiy-AVL	Trojan/Generic.ASMalwS.2AC18A5
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Generic.D1E45F18
GData	Win32.Trojan.Agent.ALJ
AhnLab-V3	Trojan/Win32.Agent.C3122853
McAfee	Artemis!9F74DF24690E
MAX	malware (ai score=84)
VBA32	BScope.TrojanDownloader.Bitmin
Yandex	Trojan.GenAsa!LOiQpYSV0A0
Ikarus	Trojan-Downloader.Win32.VB
Fortinet	W32/VB.RIR!tr.dldr
AVG	Win32:Trojan-gen
Paloalto	generic.ml