Categories: Trojan

Win32/TrojanDropper.VB.NGV removal instruction

The Win32/TrojanDropper.VB.NGV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanDropper.VB.NGV virus can do?

Behavioural detection: Executable code extraction – unpacking
Reads data out of its own binary image
Drops a binary and executes it
Authenticode signature is invalid
Deletes executed files from disk

How to determine Win32/TrojanDropper.VB.NGV?


File Info:
name: 81AA2D9AFC59AFB3C204.mlwpath: /opt/CAPEv2/storage/binaries/21104f85123b02cd425f5b1709d16538c6aa3ed983dc6273140f76a41e2b07accrc32: 387E36E3md5: 81aa2d9afc59afb3c2041d1502ce400asha1: 7b16dc65cf20e1165df207ad2e849535ce502f6csha256: 21104f85123b02cd425f5b1709d16538c6aa3ed983dc6273140f76a41e2b07acsha512: e69c732b34a4815b3dcf68602bb1c6bd758ccf70e0a2ebcee7f79efb3f276735ccec4e1e03237939b2b9b3d11eb0c13964d5b7933247c8436f784bf798baa535ssdeep: 1536:Y5GJEhlcbW5sk1BlfLvveIbXWm+nwN6J6D2D0qePkwMdPzE3RC19NEyzPK/et+Eq:uGu9BlfzWIbXWm+w0JW3MpHNEkPCbEqtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T11C94F8F5E6D0DA0BF5A4B93109A0FE1E0515FB34BB22EAAB5764360A5677BC04074F0Esha3_384: 6d625b4077461aea0ed299866c6d28d3270bb0d2418d350535cc2a5a8f4fe1f5c3369679287b155856603a9caf963b2aep_bytes: e80a000000e97affffffcccccccccc8btimestamp: 2008-04-13 18:32:45
Version Info:
CompanyName: Microsoft CorporationFileDescription: Win32 Cabinet Self-Extractor                                           FileVersion: 6.00.2900.5512 (xpsp.080413-2105)InternalName: Wextract                LegalCopyright: © Microsoft Corporation. All rights reserved.OriginalFilename: WEXTRACT.EXE            ProductName: Microsoft® Windows® Operating SystemProductVersion: 6.00.2900.5512Translation: 0x0409 0x04b0

Win32/TrojanDropper.VB.NGV also known as:

Lionic	Trojan.Win32.Ardamax.l!c
AVG	Win32:Evo-gen [Trj]
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Heur.VB.Krypt.13
CAT-QuickHeal	Trojan.VBVMF.S2280711
Skyhigh	Generic VB.do
McAfee	Artemis!81AA2D9AFC59
Malwarebytes	Generic.Malware.AI.DDS
K7AntiVirus	Hacktool ( 0052874c1 )
Alibaba	TrojanDropper:Win32/Cryptor.cec9d1a4
K7GW	Hacktool ( 0052874c1 )
Cybereason	malicious.afc59a
Baidu	Win32.Trojan-Dropper.VB.an
VirIT	Trojan.Win32.VB.CAW
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/TrojanDropper.VB.NGV
Cynet	Malicious (score: 99)
APEX	Malicious
ClamAV	Win.Dropper.Remcos-7051626-0
Kaspersky	Trojan.Win32.VB.bkwm
BitDefender	Gen:Heur.VB.Krypt.13
NANO-Antivirus	Trojan.Win32.VB.ezgvfv
Avast	Win32:Evo-gen [Trj]
Tencent	Malware.Win32.Gencirc.10b298c6
Emsisoft	Gen:Heur.VB.Krypt.13 (B)
F-Secure	Trojan-Dropper:W32/Otfus.gen!A
DrWeb	Trojan.PWS.Multi.76
VIPRE	Gen:Heur.VB.Krypt.13
TrendMicro	Mal_Poison3
Trapmine	suspicious.low.ml.score
FireEye	Gen:Heur.VB.Krypt.13
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious SFX
Jiangmin	Trojan.VB.asew
Webroot	W32.Malware.Gen
Varist	W32/Vbinder.B.gen!Eldorado
Avira	TR/Dropper.Gen
MAX	malware (ai score=97)
Antiy-AVL	Trojan/Win32.VB.bkwm
Kingsoft	malware.kb.a.998
Microsoft	Trojan:Win32/Ymacco
Xcitium	Malware@#220zq4ntu3w3s
Arcabit	Trojan.VB.Krypt.13 [many]
ZoneAlarm	Trojan.Win32.VB.bkwm
GData	Gen:Heur.VB.Krypt.13 (2x)
Google	Detected
AhnLab-V3	Backdoor/Win32.Bifrose.C136283
VBA32	Malware-Cryptor.VB.gen.1
Cylance	unsafe
Panda	Generic Suspicious
TrendMicro-HouseCall	Mal_Poison3
Rising	Trojan.Win32.VBCode.ake (CLASSIC)
Yandex	Trojan.GenAsa!c5MStWXfdc4
Ikarus	Backdoor.Win32.VB
Fortinet	W32/VB.BKWM!tr
BitDefenderTheta	AI:Packer.64829A551F
DeepInstinct	MALICIOUS
alibabacloud	Trojan[dropper]:MSOffice/VB.bkwm