Backdoor.VB.Agent.KQ (B) removal

The Backdoor.VB.Agent.KQ (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Backdoor.VB.Agent.KQ (B) virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Backdoor.VB.Agent.KQ (B)?


File Info:
name: 146B4BE852265F3B73BF.mlw
path: /opt/CAPEv2/storage/binaries/cfe9115285a1450530c883b35765c9410d229e01546caf1ad021099b24c3375f
crc32: 0340E2E0
md5: 146b4be852265f3b73bf41c5ad022de0
sha1: 058263369c981e6e1e1acef3ed57d533e9620823
sha256: cfe9115285a1450530c883b35765c9410d229e01546caf1ad021099b24c3375f
sha512: a3b919836bc9715e3e4ecb76b0bf42af9df2938007786b02d53b9ff1291d4cfdf9ae6534f6b56452879a16643d799641ff3ac38b9e3f9e3bf387d491bfaa43c5
ssdeep: 768:TxZJNZDM+ib/bszdST8cDxb4NHVGKkGTYOthGn7wk52jfqQDV4PoTd57YENGwQzK:dZJghTudSJOjs8koyAFx57YjHzZ5oFDp
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11F935FA37F712458F56856302EFFA6F7D5E2E09D8A1742424F3426299BDFE031C24A53
sha3_384: f7c8d64c2799dcd54b6cf31f4df00625e01872141d952639e9499acb8baa61fb2f5c9ae19248760bab7afd59ea47bd93
ep_bytes: 68c4124000e8eeffffff000000000000
timestamp: 2012-04-27 19:36:12

Version Info:
0: [No Data]

Backdoor.VB.Agent.KQ (B) also known as:

Bkav	W32.AIDetect.malware1
MicroWorld-eScan	Backdoor.VB.Agent.KQ
ClamAV	Win.Packed.Vobfus-9806522-0
FireEye	Generic.mg.146b4be852265f3b
CAT-QuickHeal	Worm.VobfusuMF.S19993862
ALYac	Backdoor.VB.Agent.KQ
Sangfor	Suspicious.Win32.Save.vb
Cybereason	malicious.852265
Baidu	Win32.Worm.VB.au
VirIT	Trojan.Win32.Zyx.KB
Cyren	W32/Vobfus.RM.gen!Eldorado
Symantec	W32.Changeup
Elastic	malicious (high confidence)
ESET-NOD32	Win32/AutoRun.VB.AVG
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.VBKrypt.ltuh
BitDefender	Backdoor.VB.Agent.KQ
NANO-Antivirus	Trojan.Win32.VBKrypt.covjxo
Avast	Win32:VB-ACOX [Trj]
Ad-Aware	Backdoor.VB.Agent.KQ
Emsisoft	Backdoor.VB.Agent.KQ (B)
DrWeb	Trojan.DownLoader11.20151
VIPRE	Backdoor.VB.Agent.KQ
McAfee-GW-Edition	BehavesLike.Win32.PWSZbot.nt
Trapmine	malicious.high.ml.score
Sophos	ML/PE-A + Mal/SillyFDC-X
SentinelOne	Static AI – Malicious PE
GData	Backdoor.VB.Agent.KQ
Jiangmin	Trojan/Vobfus.gaz
Avira	TR/Barys.2229.jh.4
MAX	malware (ai score=82)
Antiy-AVL	Trojan/Generic.ASMalwFH.39
Arcabit	Backdoor.VB.Agent.KQ
Microsoft	Worm:Win32/Vobfus.gen!U
Google	Detected
McAfee	VBObfus.dv
TACHYON	Trojan/W32.VB-VBKrypt.93076.B
Malwarebytes	Vobfus.Worm.Evasion.DDS
Rising	Worm.Win32.VBCode.ef (CLASSIC)
Yandex	Trojan.VBGent.Gen.1324
Ikarus	Trojan.Barys
MaxSecure	Trojan.VBKrypt.ltuh
AVG	Win32:VB-ACOX [Trj]
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Backdoor.VB.Agent.KQ (B)?

Backdoor.VB.Agent.KQ (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X