Categories: Malware

Win32/VB.OPR removal instruction

The Win32/VB.OPR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/VB.OPR virus can do?

Executable code extraction
Reads data out of its own binary image
A process created a hidden window
Drops a binary and executes it
Unconventionial language used in binary resources: Arabic
The binary likely contains encrypted or compressed data.
Uses Windows utilities for basic functionality
Detects Sandboxie through the presence of a library
Detects VirtualBox through the presence of a library
Detects VMware through the presence of a library
Deletes its original binary from disk
Detects VirtualBox through the presence of a file
Detects VMware through the presence of a file
Attempts to modify proxy settings
Creates a copy of itself
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/VB.OPR?


File Info:
crc32: 8E298A17md5: 36b54b865ae19f23d80a89fa5ddc6699name: firms.exesha1: e936de51df9378db8eb202429abba0b7ab55a4acsha256: bd1ec125782123d3f7faed4df1b3cdbd4c78f54b1e01c0275e434eceb6b6e15fsha512: 38ff2a638cd3570fe1fada79240d7afd77ec54a2c1c22bf70a990cd064deacbfe785fae0c2bac2f6fb301ae61897d38b10eff10d82754bc6166cdf04b2f0332dssdeep: 768:uAbjT/H15MOMZ85+fiv0eo1JLanDLkwEQWenbcuyD7Un:uAbjT/HmZZAo2UwEenouy8type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/VB.OPR also known as:

FireEye	Generic.mg.36b54b865ae19f23
CAT-QuickHeal	Worm.VBNA
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	P2PWorm ( 0055d3831 )
K7GW	P2PWorm ( 0055d3831 )
Cybereason	malicious.1df937
Invincea	heuristic
APEX	Malicious
Avast	Win32:Trojan-gen
GData	Win32.Trojan.Agent.6WG9PF
Kaspersky	Worm.Win32.VBNA.c
Alibaba	Worm:Win32/VBInject.4e539713
NANO-Antivirus	Trojan.Win32.VB.gzrqhl
ViRobot	Trojan.Win32.Z.Agent.33792.AOP
AegisLab	Worm.Win32.VBNA.o!c
Tencent	Win32.Worm.Vbna.Llhl
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Dropper.Gen
DrWeb	Trojan.Siggen9.10430
TrendMicro	TROJ_GEN.R002C0DBA20
McAfee-GW-Edition	BehavesLike.Win32.RAHack.nc
Trapmine	malicious.high.ml.score
Ikarus	Virus.Win32.Virut
Avira	TR/Dropper.Gen
Endgame	malicious (high confidence)
ZoneAlarm	Worm.Win32.VBNA.c
Microsoft	Trojan:Win32/Occamy.C
AhnLab-V3	Win-Trojan/Malpacked5.Gen
Acronis	suspicious
McAfee	Artemis!36B54B865AE1
VBA32	Trojan.VB.Schmidti
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/VB.OPR
TrendMicro-HouseCall	TROJ_GEN.R002C0DBA20
Rising	Worm.VBNA!8.2BE (CLOUD)
SentinelOne	DFI – Malicious PE
Fortinet	W32/VBNA.C!worm
BitDefenderTheta	Gen:NN.ZevbaF.34090.cuGfa8XYd6aG
AVG	Win32:Trojan-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Win32/Worm.48e