Categories: Malware

What is “Win64/Packed.VMProtect.W”?

The Win64/Packed.VMProtect.W is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win64/Packed.VMProtect.W virus can do?

The binary likely contains encrypted or compressed data.
The executable is likely packed with VMProtect

How to determine Win64/Packed.VMProtect.W?


File Info:
crc32: 8CFC310Emd5: b7bae8a41882fbaac3c1d2de5e8dec51name: B7BAE8A41882FBAAC3C1D2DE5E8DEC51.mlwsha1: 7b7886967a131569440832d068c423f37204928asha256: d94018ae9bee0bbcd1168a08161954858d321381f4fd4b714b9d208475043f50sha512: 33f1d91a5c9425b1b38daa1d457861159e6eb73346397d7759e215fa47d9d2b4ac08485b4bc34b36ac6c4700e5e79e9aab631ed81a5b1359b19b1076acfe605cssdeep: 12288:PPZQEiXoORFlExFuGvbvZZf4c4vO4g04y49+WZLLL8Gd7xrJtlGl9OCyiwRgbi8:PPZQP47nFTxZf4/vRb4y01BDVW7yiSNtype: PE32+ executable (GUI) x86-64, for MS Windows
Version Info:
Translation: 0x0809 0x04b0

Win64/Packed.VMProtect.W also known as:

K7AntiVirus	Trojan ( 0056ca7b1 )
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (W)
Alibaba	Packed:Win64/VMProtect.c66ea412
K7GW	Trojan ( 0056ca7b1 )
Cybereason	malicious.67a131
Cyren	W64/S-ec191146!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win64/Packed.VMProtect.W
APEX	Malicious
Avast	Win64:Evo-gen [Susp]
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Trojan.Win64.Razy.femjeg
Tencent	Win32.Trojan.Generic.Phgk
Sophos	Mal/Generic-S (PUA)
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win64.Kudj.bc
FireEye	Generic.mg.b7bae8a41882fbaa
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1100136
Antiy-AVL	Trojan/Generic.ASMalwS.24A76A9
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	HEUR:Trojan.Win32.Generic
AhnLab-V3	Unwanted/Win32.Agent.C2387031
Acronis	suspicious
McAfee	Artemis!B7BAE8A41882
VBA32	Adware.Presenoker
Malwarebytes	Trojan.MalPack.VMP
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002H0CIT21
Yandex	Trojan.GenAsa!9SUVGPLTYyU
Ikarus	Trojan.Win64.Vmprotect
Fortinet	W64/CoinMiner.AA!tr
AVG	Win64:Evo-gen [Susp]
Paloalto	generic.ml