Trojan

What is “Trojan.VB.01508”?

Malware Removal

The Trojan.VB.01508 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.VB.01508 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Authenticode signature is invalid

How to determine Trojan.VB.01508?


File Info:

name: C8072DF94D0382F42ECE.mlw
path: /opt/CAPEv2/storage/binaries/293adb331c8d0cbdc07286d75d81938d762b6b7baa2dcee5e599f762544ac606
crc32: 6CE6C998
md5: c8072df94d0382f42ece7d5f96061c50
sha1: e4a8357cb9d9eb2abf0123c029b82cb5a39def34
sha256: 293adb331c8d0cbdc07286d75d81938d762b6b7baa2dcee5e599f762544ac606
sha512: 1a4871827f13be8dd573e415a95166f7c5262552904e73265c0e95f60961956e8f069b2198d3b77620be50427378d3c79480e4dcce783e54767a48cc98e3471b
ssdeep: 3072:cnf/8m6NUf6VRlxzhPak8LXo463Biz8iKPSEO:G/ViUSVPxNPaLLXoNRiQiK
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A814D42A76A1F23AC625CAF46D5A43E080BDAD3230D2AD17F7C21B16B7F2D579250713
sha3_384: 4ef806fe08687588d0276103a57245eacab58b47790e9d918b5d084e891c3ee8de50e1ffa848c851e5563a33d106e379
ep_bytes: 68f8324000e8f0ffffff000000000000
timestamp: 2011-08-24 02:23:10

Version Info:

Translation: 0x0409 0x04b0
ProductName: NhQHZEuFDT
FileVersion: 1.00
ProductVersion: 1.00
InternalName: JCGlkyXtkUOUuDFstw
OriginalFilename: JCGlkyXtkUOUuDFstw.exe

Trojan.VB.01508 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKDZ.95452
ClamAVWin.Trojan.VB-73714
CAT-QuickHealTrojan.Vobfus.gen
McAfeeVBObfus.df
MalwarebytesGeneric.Worm.AutoRun.DDS
VIPRETrojan.GenericKDZ.95452
SangforSuspicious.Win32.Save.vb
CrowdStrikewin/malicious_confidence_100% (W)
K7GWEmailWorm ( 0054d10f1 )
K7AntiVirusEmailWorm ( 0054d10f1 )
BaiduWin32.Trojan.Inject.n
VirITTrojan.Win32.Diple.AFBO
CyrenW32/Vobfus.V.gen!Eldorado
SymantecW32.Changeup!gen15
ESET-NOD32a variant of Win32/AutoRun.VB.AKI
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan.Win32.VBKrypt.wzzv
BitDefenderTrojan.GenericKDZ.95452
NANO-AntivirusTrojan.Win32.VB.rilqe
SUPERAntiSpywareTrojan.Agent/Gen-Vban
AvastWin32:Regrun-II [Trj]
TencentWorm.Win32.Vobfus.n
EmsisoftTrojan.GenericKDZ.95452 (B)
F-SecureTrojan.TR/Otran.AC
DrWebTrojan.VbCrypt.60
ZillyaTrojan.VBKrypt.Win32.802432
TrendMicroWORM_VOBFUS.SMAC
McAfee-GW-EditionBehavesLike.Win32.VBObfus.dt
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.c8072df94d0382f4
SophosMal/VB-XV
IkarusWorm.Win32.WBNA
GDataWin32.Trojan.PSE.10I69CR
JiangminTrojan.VBKrypt.ggaa
AviraTR/Otran.AC
MAXmalware (ai score=88)
Antiy-AVLWorm/Win32.WBNA.gen
XcitiumWorm.Win32.Vobfus.~s@4m2ayb
ArcabitTrojan.Generic.D174DC
ZoneAlarmTrojan.Win32.VBKrypt.wzzv
MicrosoftWorm:Win32/Vobfus.gen!N
GoogleDetected
AhnLab-V3Trojan/Win32.Diple.R23097
VBA32Trojan.VB.01508
ALYacTrojan.GenericKDZ.95452
TACHYONTrojan/W32.VB-VBKrypt.204800.AY
Cylanceunsafe
PandaW32/Vobfus.GEW.worm
TrendMicro-HouseCallWORM_VOBFUS.SMAC
RisingWorm.Vobfus!1.99C8 (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/VBKrypt.C!tr
BitDefenderThetaAI:Packer.8ECCA7251F
AVGWin32:Regrun-II [Trj]
Cybereasonmalicious.94d038
DeepInstinctMALICIOUS

How to remove Trojan.VB.01508?

Trojan.VB.01508 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment