_VTI_BIN.EXE is Trojan Downloader

The file _VTI_BIN.EXE is identified as a virus dropper.
The dropper _VTI_BIN.EXE is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
The file _VTI_BIN.EXE loads into the computer memory and tries to connect to the dangerous web site.
Usually the _VTI_BIN.EXE dropper does not infect the files on the computer and does not replicate itself on other computers.
Kill the _VTI_BIN.EXE process and delete the file _VTI_BIN.EXE.

Malware Analysis of _VTI_BIN.EXE
Full path on a computer: %PROGRAM FILES COMMON%\MICROSOFT SHARED\WEB SERVER EXTENSIONS\40\_VTI_BIN\_VTI_BIN.EXE

How to quickly detect _VTI_BIN.EXE presence?

Files:

• %SYSTEMDRIVE%\FAR2\DONE.EXE
• %SYSTEMDRIVE%\FAR2\PLUGINSDK\DONE.EXE
• %SYSTEMDRIVE%\FAR2\PLUGINSDK\HEADERS.PAS\DONE.EXE
• %PROGRAM FILES COMMON%\MICROSOFT SHARED\MICROSOFT SHARED.EXE
• %PROGRAM FILES COMMON%\MICROSOFT SHARED\WEB SERVER EXTENSIONS\40\_VTI_BIN\_VTI_BIN.EXE