Backdoor.VB.Agent.ABT removal guide

The Backdoor.VB.Agent.ABT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.VB.Agent.ABT virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Dynamic (imported) function loading detected
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Installs itself for autorun at Windows startup
• Attempts to modify Explorer settings to prevent hidden files from being displayed

How to determine Backdoor.VB.Agent.ABT?

File Info:
name: 9B0449CB71EC67A3AF4F.mlw
path: /opt/CAPEv2/storage/binaries/314cb8134b08596016acf59978652f63ec11943a776cf9d7b15ddb42d1826a3a
crc32: 9A7B3346
md5: 9b0449cb71ec67a3af4f9b5b2d79847f
sha1: 21a5c93c4d9426cafe68d26a6c964af816eb787d
sha256: 314cb8134b08596016acf59978652f63ec11943a776cf9d7b15ddb42d1826a3a
sha512: 240e99493b8f17dfa078969c1ae0dc4df828a2cb07a5fbe063c26df5cf83906e71c379173d14e2ba27bbf4f823bdeac2cc0707412380675db128ba582048ec31
ssdeep: 3072:9VMKsWKxlGxE07ABigCFHdLYyBvzyBHNGqXgvnHZyzi0zslLFa/FzKsRJgN:D3sWKxQ52CFHdLYKvzyZNGX/IupG2sr4
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17414426BF521C058E59240B8742CEA8AF45C7E7305446972FB81BB5939B27EFA0F5B03
sha3_384: 5af7d0c7c9963a8375b655a6d74aa3c043b3794b0c78b2d4cf04f5f588ed57b107804a1e65ea2ffb895167612f85a0e2
ep_bytes: 6868784000e8f0ffffff000000000000
timestamp: 2008-12-07 04:12:59

Version Info:
Translation: 0x0409 0x04b0
ProductName: Project1
FileVersion: 1.00
ProductVersion: 1.00
InternalName: DOCUMENT
OriginalFilename: DOCUMENT.exe

Backdoor.VB.Agent.ABT also known as:

How to remove Backdoor.VB.Agent.ABT?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.