Malware

Generic.VbsAuto.1.150EF3AA (file analysis)

Malware Removal

The Generic.VbsAuto.1.150EF3AA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Generic.VbsAuto.1.150EF3AA virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • A scripting utility was executed
  • Uses Windows utilities for basic functionality
  • Uses Windows utilities for basic functionality

How to determine Generic.VbsAuto.1.150EF3AA?



File Info:

name: 42AE2FD4721CC70586B7.mlw
path: /opt/CAPEv2/storage/binaries/4f9dc1a9006227cfe3f47eb2233d606850976936cfe0d9c36216de64c83fe0a7
crc32: 26DC7238
md5: 42ae2fd4721cc70586b7a263b8797eb3
sha1: 471ea7e1f2fdf7b0842d15d47c3e8982eb33aae0
sha256: 4f9dc1a9006227cfe3f47eb2233d606850976936cfe0d9c36216de64c83fe0a7
sha512: 7e14c1485721cbf4802ea4e7c2a708500908dc457d45c57bc2a5218aa71a6887666a5a2b5bfa40a56513ba7ee37c31ec1f2bd605e445ff030f2635681c751292
ssdeep: 6144:Ffsd47W6Q4PGWMK/bJ7d23vocLbLzyH9zFYjNZTlp7yIXQTs6kCRa0c5:JsOW6Q4OWz9h4LbLzyH9zF2WsUdkCBg
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D4A4BF32B7D184B2E5722D350929A710697C7D201E27CE6EB3D81E6DBF710C16621BAF
sha3_384: 89bd51d499e738ab9029ee6834323ff06e1d1b49c0980811d58865583ba28f7d6f027c985af34437b71e40db3f2b9315
ep_bytes: e89e040000e98efeffff3b0dc8a14300
timestamp: 2018-06-04 17:48:26


Version Info:

0: [No Data]

Generic.VbsAuto.1.150EF3AA also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.VbsAuto.4!c
DrWebTool.Nssm.3
MicroWorld-eScanGeneric.VbsAuto.1.150EF3AA
FireEyeGeneric.mg.42ae2fd4721cc705
McAfeeRDN/Generic PUP.z
CylanceUnsafe
K7GWTrojan ( 00562f7f1 )
K7AntiVirusTrojan ( 00562f7f1 )
SymantecTrojan.Gen.2
ESET-NOD32multiple detections
TrendMicro-HouseCallTROJ_GEN.R002C0PGR21
AvastFileRepMalware
ClamAVWin.Dropper.Bladabindi-6813690-0
Kasperskynot-a-virus:AdWare.Win32.Agent.xxyyqc
BitDefenderGeneric.VbsAuto.1.150EF3AA
NANO-AntivirusTrojan.Win32.NSSM.ezaxoj
SophosGeneric PUA EH (PUA)
ComodoMalware@#2m54tr0dckbe4
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0PGR21
McAfee-GW-EditionBehavesLike.Win32.Generic.gh
EmsisoftGeneric.VbsAuto.1.150EF3AA (B)
Paloaltogeneric.ml
MicrosoftTrojan:Win32/Occamy.C4F
GDataGeneric.VbsAuto.1.150EF3AA
VBA32Adware.Agent
ALYacGeneric.VbsAuto.1.150EF3AA
MAXmalware (ai score=100)
MalwarebytesMalware.AI.4200165158
APEXMalicious
RisingHackTool.NSSM!1.CABB (CLASSIC)
FortinetRiskware/NSSM
AVGFileRepMalware
Cybereasonmalicious.4721cc
MaxSecureTrojan.Malware.300983.susgen

How to remove Generic.VbsAuto.1.150EF3AA?

Generic.VbsAuto.1.150EF3AA removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment