Should I remove “Trojan:Win32/VBInject.VAMV!MTB”?

The Trojan:Win32/VBInject.VAMV!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/VBInject.VAMV!MTB virus can do?

Executable code extraction
Presents an Authenticode digital signature
Unconventionial language used in binary resources: Chinese (Traditional)
Anomalous binary characteristics

How to determine Trojan:Win32/VBInject.VAMV!MTB?


File Info:
crc32: EA6CE361
md5: 85796a4953cf434baabeefe280019892
name: 85796A4953CF434BAABEEFE280019892.mlw
sha1: a862e0451b5c8fafb4b71f886768eef802c36eca
sha256: b60440f67015b49577c8f2c61231ddd36c5d343373c3798bfc8cc5c2a1ce14f1
sha512: 29a3f3a79b61edf4443aa114cbb97deb5997e79dc23c9b5d0d44dec6482751e164202a8a199c3027104d12bc7223339b986cb27ed51a45de52af56915ab7ea1e
ssdeep: 1536:CO4+UsMmxXWyCN2UR1YNTFuWku67IysR83h37:qsMIWZN2UR1q0X207
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0404 0x04b0
InternalName: SYNCEPHALIC
FileVersion: 1.00
CompanyName: Green Stream
ProductName: Green Stream
ProductVersion: 1.00
OriginalFilename: SYNCEPHALIC.exe

Trojan:Win32/VBInject.VAMV!MTB also known as:

K7AntiVirus	Trojan ( 0057b8ec1 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Trojan.Agent.GuLoader
Cylance	Unsafe
Sangfor	Trojan.Win32.VBInject.VAMV
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/VBInject.48271cc3
K7GW	Trojan ( 0057b8ec1 )
Cyren	W32/VB.TC.gen!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/Kryptik.HKOY
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Trojan.Agent.FGJF
MicroWorld-eScan	Trojan.Agent.FGJF
Ad-Aware	Trojan.Agent.FGJF
Sophos	Mal/Generic-S + Troj/VB-KZB
Comodo	TrojWare.Win32.Agent.oalve@0
BitDefenderTheta	Gen:NN.ZevbaF.34684.gm1@aCx8RJfb
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	RDN/packed-ftd
FireEye	Generic.mg.85796a4953cf434b
Emsisoft	Trojan.Agent.FGJF (B)
Avira	TR/Crypt.Agent.vsibo
eGambit	Unsafe.AI_Score_60%
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/VBInject.VAMV!MTB
GData	Trojan.Agent.FGJF
AhnLab-V3	Trojan/Win.VBInject.C4443803
McAfee	RDN/packed-ftd
MAX	malware (ai score=84)
Malwarebytes	Trojan.GuLoader
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TrojanSpy.Win32.BTCWARE.USMANDR21
Rising	Trojan.Kryptik!8.8 (CLOUD)
Ikarus	Trojan.Win32.Crypt
Fortinet	W32/Kryptik.HKOY!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Trojan:Win32/VBInject.VAMV!MTB?

Trojan:Win32/VBInject.VAMV!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X