VB.Heur.PwShell.18.E39E047A.Gen information

The VB.Heur.PwShell.18.E39E047A.Gen is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What VB.Heur.PwShell.18.E39E047A.Gen virus can do?

How to determine VB.Heur.PwShell.18.E39E047A.Gen?


File Info:
crc32: 79F1514D
md5: 8d82b9280f808df8d9950763c15a5427
name: upload_file
sha1: 04b4d5ebe15c2d7ccc9ac945443c3d3bcbc0b2e4
sha256: 4a94021e5b258356abad258f41d0d4f2b597fc95b2b038cefbe067bad86adfcc
sha512: d8c23c24b1bea632e5c9826baa0bd593edd2dc19498aef0c982f10b13f37e89fbed221cc5e41c93e8a4798ecab8ff8bf28f022ac9f676361b9d3e9765d965b87
ssdeep: 12288:K49w8fyunGthwu8kxPthZugvq4jzjSGUumc:K49b7AhFxPthZnvL3tP
type: Microsoft Excel 2007+

Version Info:
0: [No Data]

VB.Heur.PwShell.18.E39E047A.Gen also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	VB.Heur.PwShell.18.E39E047A.Gen
BitDefender	VB.Heur.PwShell.18.E39E047A.Gen
Symantec	ISB.Downloader!gen48
Avast	JS:ScriptSH-inf [Trj]
Kaspersky	HEUR:Trojan-Downloader.Script.Generic
Alibaba	TrojanDownloader:VBA/MalDoc.ali1000103
NANO-Antivirus	Trojan.Ole2.Vbs-heuristic.druvzi
Tencent	Win32.Trojan-downloader.Agent.Ednu
Ad-Aware	VB.Heur.PwShell.18.E39E047A.Gen
TACHYON	Suspicious/XOX.Downloader.Gen
F-Secure	Malware.VBA/Dldr.Agent.qjncw
McAfee-GW-Edition	BehavesLike.Downloader.gc
FireEye	VB.Heur.PwShell.18.E39E047A.Gen
Emsisoft	VB.Heur.PwShell.18.E39E047A.Gen (B)
SentinelOne	DFI – Suspicious OPENXML
GData	VB.Heur.PwShell.18.E39E047A.Gen
Avira	VBA/Dldr.Agent.qjncw
Microsoft	Trojan:Script/Wacatac.B!ml
Arcabit	VB.Heur.PwShell.18.E39E047A.Gen
ZoneAlarm	HEUR:Trojan-Downloader.Script.Generic
Cynet	Malicious (score: 85)
MAX	malware (ai score=88)
Zoner	Probably Heur.W97DownloaderA
ESET-NOD32	VBA/TrojanDownloader.Agent.URY
Rising	Malware.ObfusVBA@ML.97 (VBA)
Yandex	Trojan.Slntscn24.bUxGMu
Ikarus	Trojan-Downloader.VBA.Agent
Fortinet	VBA/Agent.SRJ!tr.dldr
AVG	JS:ScriptSH-inf [Trj]
Qihoo-360	virus.office.qexvmc.1095

How to remove VB.Heur.PwShell.18.E39E047A.Gen?

VB.Heur.PwShell.18.E39E047A.Gen removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X