Categories: Trojan

About “Trojan.VB.Agent.EA” infection

The Trojan.VB.Agent.EA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.VB.Agent.EA virus can do?

  • Sample contains Overlay data
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Trojan.VB.Agent.EA?


File Info:

name: FBF2CE745722DF6439ED.mlwpath: /opt/CAPEv2/storage/binaries/870bf43ea00df9b1440286819b3dcb3f53508bbb19d11e36a367112464ef460fcrc32: 59140EF6md5: fbf2ce745722df6439ed84ce8ea3692esha1: 0bd2e4704ef6be836487581745d3eba413d65aadsha256: 870bf43ea00df9b1440286819b3dcb3f53508bbb19d11e36a367112464ef460fsha512: b4f00879a014a3a8be50917195b448a97e770b85bb9ff90b2613780460e3138497f26a9f97faa8dbca0e218bed12baf92a847d65d1e4b8f6107d1869656246a3ssdeep: 3072:Ec77hFDtrc9X8ctsIEDHJdnX3TNlvoQS8:bhFdi72RpdnHTPod8type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1C7D3CF607788E631F589C6F99A67C2F40432BC324451591BF2D6FF5F7EBAB42A460283sha3_384: 194c2645146853f2bea00911d69a32ea2a8fbf937bddff76067a1bdf0e48c493fef546b594388e7687a563dd6c1fc931ep_bytes: 16681c184000681c184000681c184000timestamp: 2010-05-08 22:14:31

Version Info:

CompanyName: Betsson Malta Ltd.ProductName: Betsson Malta Ltd.FileVersion: 2.23.0.555ProductVersion: 2.23.0.555InternalName: Betsson MaltaOriginalFilename: BetssonTranslation: 0x0409 0x04b0

Trojan.VB.Agent.EA also known as:

Bkav W32.AIDetect.malware2
Lionic Trojan.Win32.VB.l4bq
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.VB.Agent.EA
FireEye Generic.mg.fbf2ce745722df64
ALYac Trojan.VB.Agent.EA
VIPRE Trojan.VB.Agent.EA
Sangfor Trojan.Win32.Save.a
K7AntiVirus Trojan ( 002dad7c1 )
K7GW Trojan ( 002dad7c1 )
Cybereason malicious.45722d
Arcabit Trojan.VB.Agent.EA
VirIT Trojan.Win32.Generic.CBJA
Cyren W32/VBcrypt.I.gen!Eldorado
Symantec ML.Attribute.HighConfidence
tehtris Generic.Malware
ESET-NOD32 a variant of Win32/Injector.LQG
APEX Malicious
Kaspersky Packed.Win32.VBCrypt.r
BitDefender Trojan.VB.Agent.EA
NANO-Antivirus Trojan.Win32.VB.bxrcue
Avast Win32:Malware-gen
Rising Trojan.Generic@AI.100 (RDML:BU2Po9An8AIW2nQATtkQAg)
Ad-Aware Trojan.VB.Agent.EA
Sophos ML/PE-A
Comodo TrojWare.Win32.Refroso.dn@4l6cbc
DrWeb Trojan.VbCrypt.89
Zillya Trojan.Injector.Win32.200837
Emsisoft Trojan.VB.Agent.EA (B)
SentinelOne Static AI – Suspicious PE
Google Detected
Avira TR/Dropper.Gen
MAX malware (ai score=89)
Antiy-AVL Trojan/Generic.ASMalwS.595
Microsoft Trojan:Win32/Wacatac.B!ml
GData Trojan.VB.Agent.EA
Cynet Malicious (score: 100)
Acronis suspicious
McAfee BackDoor-DWZ.a
Cylance Unsafe
Yandex Trojan.Injector!/OAJ+ULacVo
Ikarus Virus.Win32.VBInject
Fortinet W32/VBCrypt.R!tr.bdr
BitDefenderTheta Gen:NN.ZexaF.34698.im2@aqBeAZbi
AVG Win32:Malware-gen
Panda Trj/Genetic.gen
CrowdStrike win/malicious_confidence_100% (W)

How to remove Trojan.VB.Agent.EA?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Should I remove “Trojan.Agent.Delf.RVB”?

The Trojan.Agent.Delf.RVB is considered dangerous by lots of security experts. When this infection is active,…

10 mins ago

IL:Trojan.MSILZilla.124965 malicious file

The IL:Trojan.MSILZilla.124965 is considered dangerous by lots of security experts. When this infection is active,…

15 mins ago

Trojan.Generic.35601204 removal

The Trojan.Generic.35601204 is considered dangerous by lots of security experts. When this infection is active,…

38 mins ago

AIT:Trojan.Nymeria.6000 information

The AIT:Trojan.Nymeria.6000 is considered dangerous by lots of security experts. When this infection is active,…

45 mins ago

MSILHeracles.68689 (B) removal instruction

The MSILHeracles.68689 (B) is considered dangerous by lots of security experts. When this infection is…

50 mins ago

Zusy.547004 removal guide

The Zusy.547004 is considered dangerous by lots of security experts. When this infection is active,…

50 mins ago