Categories: Trojan

Win32/TrojanDownloader.VB.RLW malicious file

The Win32/TrojanDownloader.VB.RLW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanDownloader.VB.RLW virus can do?

Executable code extraction
Reads data out of its own binary image
Installs itself for autorun at Windows startup
Attempts to modify proxy settings
Creates a copy of itself
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

files.catbox.moe

a.tomx.xyz

How to determine Win32/TrojanDownloader.VB.RLW?


File Info:
crc32: 4753E252md5: 4e2bd1acbbb35b101a78248634323964name: HackTools.exesha1: d361805c5eebbaba586fa4390edb6f2abe4c6826sha256: 483049a8096c489dbc98ce8292890d06716e6ef86537414d527f93dda9c1e38esha512: 5ff8f8b45442e3dcde9770c72bb875298a16cccd9e0f3e625cc15afdc6384262299c8f94662a6d72e4492b39b69665d38b5ed18683a82df8ad3551b9c714374bssdeep: 3072:crewmXzTQhR5lOeL7kPdlbyAxsbyWlZ0i2Ha:rwmcklBtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
InternalName: FileVersion: 3.01CompanyName:      ProductName: Meteorite DownloaderProductVersion: 3.01OriginalFilename: Translation: 0x0409 0x04b0

Win32/TrojanDownloader.VB.RLW also known as:

DrWeb	Trojan.DownLoader30.17344
MicroWorld-eScan	Gen:Trojan.Heur.VP.km0@aWoZ7iai
FireEye	Generic.mg.4e2bd1acbbb35b10
Qihoo-360	HEUR/QVM03.0.234F.Malware.Gen
McAfee	Artemis!4E2BD1ACBBB3
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Trojan.Heur.VP.km0@aWoZ7iai
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.cbbb35
BitDefenderTheta	AI:Packer.C965792B1F
F-Prot	W32/VBTrojan.Downloader.1D!Maxi
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Trojan-gen
GData	Gen:Trojan.Heur.VP.km0@aWoZ7iai
Kaspersky	Trojan.Win32.Agent.xabduu
Alibaba	TrojanDownloader:Win32/Generic.2074ca25
NANO-Antivirus	Trojan.Win32.VB.fxwldb
Rising	Downloader.Generic!8.141 (TFE:dGZlOgSUVA/cacJ3BA)
Endgame	malicious (high confidence)
Emsisoft	Gen:Trojan.Heur.VP.km0@aWoZ7iai (B)
F-Secure	Trojan.TR/VB.Downloader.Gen
McAfee-GW-Edition	BehavesLike.Win32.BadFile.ct
Sophos	Mal/Generic-S
Ikarus	Worm.Win32.Vobfus
Cyren	W32/VBTrojan.Downloader.1D!Maxi
Jiangmin	TrojanDownloader.Generic.bdxz
Avira	TR/VB.Downloader.Gen
Microsoft	Trojan:Win32/Wacatac.D!ml
Arcabit	Trojan.Heur.VP.ED11E1D
ZoneAlarm	Trojan.Win32.Agent.xabduu
Acronis	suspicious
VBA32	Malware-Cryptor.VB.gen.1
MAX	malware (ai score=86)
Ad-Aware	Gen:Trojan.Heur.VP.km0@aWoZ7iai
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/TrojanDownloader.VB.RLW
AVG	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_60% (D)