Categories: Malware

Win32/VB.TCH (file analysis)

The Win32/VB.TCH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/VB.TCH virus can do?

Executable code extraction
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
Attempts to interact with an Alternate Data Stream (ADS)
Anomalous binary characteristics
Uses suspicious command line tools or Windows utilities

How to determine Win32/VB.TCH?


File Info:
crc32: E2410F23md5: 08b7791299b8cdf92d741a567bd9e32dname: 08B7791299B8CDF92D741A567BD9E32D.mlwsha1: dbcae71209e163234add1ac4670fe541e9d985dfsha256: 36e2c7b1b610eee3f6c7cbae2430f99e4dd090adeb2be062f1edc0d5849d6ee9sha512: 84620cb7485c36d81df87c2d551c8730f9fd84c8d29620e2e0480dc4601d28a195e6417b5772d95f6a6c6698a16660de371177eb3ffa0b49f74c1529d145f5e7ssdeep: 1536:QRFRce6VLgSjjM9ULqBchRtq9U9SjjBRFRce6VL:QfRn4DwULqaxOU8ZfRn4type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0804 0x04b0LegalCopyright: TencentInternalName: Backtrack9FileVersion: 9.09.0028CompanyName: x6df1x5733x5e02x817ex8bafx8ba1x7b97x673ax9ad8x7ea7x7814x53d1x4e2dx5fc3LegalTrademarks: TencentComments: x6df1x5733x5e02x817ex8bafx8ba1x7b97x673ax9ad8x7ea7x7814x53d1x4e2dx5fc3x8363x8a89x51fax54c1ProductName: TencentProductVersion: 9.09.0028FileDescription: TencentOriginalFilename: Backtrack9.exe

Win32/VB.TCH also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Cyren	W32/VBTrojan.Downloader.1D!Maxi
ESET-NOD32	a variant of Win32/VB.TCH
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.KillFiles
Alibaba	Trojan:Win32/KillFiles.7ecc596b
McAfee-GW-Edition	BehavesLike.Win32.Fareit.mm
FireEye	Generic.mg.08b7791299b8cdf9
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_100%
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Program:Win32/Wacapew.C!ml
ZoneAlarm	HEUR:Trojan.Win32.KillFiles
McAfee	New Malware.d
Ikarus	Virus.Alman