Trojan

Trojan.VB.Agent.OL removal instruction

Malware Removal

The Trojan.VB.Agent.OL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.VB.Agent.OL virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Authenticode signature is invalid
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Anomalous binary characteristics

How to determine Trojan.VB.Agent.OL?


File Info:

name: 94CED6D6F655E9BF3D53.mlw
path: /opt/CAPEv2/storage/binaries/9359df634130dd514d8a2c9d176711875c33f22903ec5335bd8c67a914dc0d82
crc32: 997C024A
md5: 94ced6d6f655e9bf3d53fde606527c93
sha1: aacc7e61a91b036658c96fa6a69ee77e45a6b397
sha256: 9359df634130dd514d8a2c9d176711875c33f22903ec5335bd8c67a914dc0d82
sha512: a52e14d2c4aa34c281ad9d5ae17f97555a45bcdf6a6486ca6f9f8288acb503976266afe43ca6fc7170134ad1f35c2e1de867d215936c52af95ddcc6aa6ce3a88
ssdeep: 1536:OrDam3zfDju33TlnyaPSHJic7AqVJVhEGTLDARcfSxam9bHsAcNFvbFw9FCio3l5:uaeTDju3DQj026GTLURiSEh3ki
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DEE3A37F7BA061D4E61625302AF6D3F2055BBC2C5B07804B2624B36A28F6F115E6EF17
sha3_384: 4557e8e75337ad073baadcf36609e33cbf00e285a4381babd5f1eac61f3b383bf0691db271192c2131af5c0581785b2c
ep_bytes: 689c124000e8f0ffffff000000000000
timestamp: 2012-11-26 19:19:16

Version Info:

CompanyName: Camass
ProductName: sporalood
FileVersion: 5.53
ProductVersion: 5.53
InternalName: saffisso
OriginalFilename: saffisso.exe

Trojan.VB.Agent.OL also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Vobfus.4!c
AVGWin32:VB-AFEI [Trj]
tehtrisGeneric.Malware
MicroWorld-eScanTrojan.VB.Agent.OL
FireEyeGeneric.mg.94ced6d6f655e9bf
CAT-QuickHealTrojan.Beebone.D
SkyhighBehavesLike.Win32.VBObfus.cm
McAfeeW32/Autorun.worm.qr
MalwarebytesGeneric.Malware.AI.DDS
SangforSuspicious.Win32.Save.vb
K7AntiVirusEmailWorm ( 0054d10f1 )
AlibabaWorm:Win32/Vobfus.053b3230
K7GWEmailWorm ( 0054d10f1 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaGen:NN.ZevbaF.36802.jm0@aGQ@3Jbi
VirITTrojan.Win32.VBCrypt.FBN
SymantecW32.Changeup
Elasticmalicious (high confidence)
ESET-NOD32Win32/Pronny.IJ
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Trojan.Changeup-5
KasperskyTrojan.Win32.Agent.uxpi
BitDefenderTrojan.VB.Agent.OL
NANO-AntivirusTrojan.Win32.Agent.covkam
AvastWin32:VB-AFEI [Trj]
TencentTrojan.Win32.Agent.hcl
TACHYONTrojan/W32.Agent.155648
SophosMal/Autorun-AX
F-SecureWorm.WORM/Vobfus.psb
DrWebTrojan.DownLoader7.31207
VIPRETrojan.VB.Agent.OL
TrendMicroWORM_VOBFUS.SMRR
Trapminemalicious.high.ml.score
EmsisoftTrojan.VB.Agent.OL (B)
SentinelOneStatic AI – Malicious PE
GDataTrojan.VB.Agent.OL
JiangminTrojan/Agent.hcaz
AviraWORM/Vobfus.psb
Antiy-AVLWorm/Win32.WBNA.gen
XcitiumTrojWare.Win32.Pronny.IJ@4s7ryl
ArcabitTrojan.VB.Agent.OL
ZoneAlarmTrojan.Win32.Agent.uxpi
MicrosoftWorm:Win32/Vobfus.MB
VaristW32/VB.HC.gen!Eldorado
AhnLab-V3Worm/Win32.VBNA.R44312
ALYacTrojan.VB.Agent.OL
MAXmalware (ai score=84)
VBA32Trojan.Agent
Cylanceunsafe
PandaW32/Vobfus.gen.worm
TrendMicro-HouseCallWORM_VOBFUS.SMRR
RisingWorm.Pronny!8.2E9 (TFE:3:xC5A3w3HPWD)
YandexTrojan.GenAsa!SC9vfg0EbGo
IkarusWorm.Win32.VBNA
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/WBNA.IPA!worm
Cybereasonmalicious.6f655e
DeepInstinctMALICIOUS
alibabacloudWorm:Win/Vobfus.b67261f8

How to remove Trojan.VB.Agent.OL?

Trojan.VB.Agent.OL removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment