Categories: Malware

Generic.VbsAuto.1.150EF3AA (file analysis)

The Generic.VbsAuto.1.150EF3AA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.VbsAuto.1.150EF3AA virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Reads data out of its own binary image
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
A scripting utility was executed
Uses Windows utilities for basic functionality
Uses Windows utilities for basic functionality

How to determine Generic.VbsAuto.1.150EF3AA?


File Info:
name: 42AE2FD4721CC70586B7.mlwpath: /opt/CAPEv2/storage/binaries/4f9dc1a9006227cfe3f47eb2233d606850976936cfe0d9c36216de64c83fe0a7crc32: 26DC7238md5: 42ae2fd4721cc70586b7a263b8797eb3sha1: 471ea7e1f2fdf7b0842d15d47c3e8982eb33aae0sha256: 4f9dc1a9006227cfe3f47eb2233d606850976936cfe0d9c36216de64c83fe0a7sha512: 7e14c1485721cbf4802ea4e7c2a708500908dc457d45c57bc2a5218aa71a6887666a5a2b5bfa40a56513ba7ee37c31ec1f2bd605e445ff030f2635681c751292ssdeep: 6144:Ffsd47W6Q4PGWMK/bJ7d23vocLbLzyH9zFYjNZTlp7yIXQTs6kCRa0c5:JsOW6Q4OWz9h4LbLzyH9zF2WsUdkCBgtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D4A4BF32B7D184B2E5722D350929A710697C7D201E27CE6EB3D81E6DBF710C16621BAFsha3_384: 89bd51d499e738ab9029ee6834323ff06e1d1b49c0980811d58865583ba28f7d6f027c985af34437b71e40db3f2b9315ep_bytes: e89e040000e98efeffff3b0dc8a14300timestamp: 2018-06-04 17:48:26
Version Info:
0: [No Data]

Generic.VbsAuto.1.150EF3AA also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.VbsAuto.4!c
DrWeb	Tool.Nssm.3
MicroWorld-eScan	Generic.VbsAuto.1.150EF3AA
FireEye	Generic.mg.42ae2fd4721cc705
McAfee	RDN/Generic PUP.z
Cylance	Unsafe
K7GW	Trojan ( 00562f7f1 )
K7AntiVirus	Trojan ( 00562f7f1 )
Symantec	Trojan.Gen.2
ESET-NOD32	multiple detections
TrendMicro-HouseCall	TROJ_GEN.R002C0PGR21
Avast	FileRepMalware
ClamAV	Win.Dropper.Bladabindi-6813690-0
Kaspersky	not-a-virus:AdWare.Win32.Agent.xxyyqc
BitDefender	Generic.VbsAuto.1.150EF3AA
NANO-Antivirus	Trojan.Win32.NSSM.ezaxoj
Sophos	Generic PUA EH (PUA)
Comodo	Malware@#2m54tr0dckbe4
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0PGR21
McAfee-GW-Edition	BehavesLike.Win32.Generic.gh
Emsisoft	Generic.VbsAuto.1.150EF3AA (B)
Paloalto	generic.ml
Microsoft	Trojan:Win32/Occamy.C4F
GData	Generic.VbsAuto.1.150EF3AA
VBA32	Adware.Agent
ALYac	Generic.VbsAuto.1.150EF3AA
MAX	malware (ai score=100)
Malwarebytes	Malware.AI.4200165158
APEX	Malicious
Rising	HackTool.NSSM!1.CABB (CLASSIC)
Fortinet	Riskware/NSSM
AVG	FileRepMalware
Cybereason	malicious.4721cc
MaxSecure	Trojan.Malware.300983.susgen