Malware

How to remove “VBA.Heur2.Dridex.5.B90A646D.Gen”?

Malware Removal

The VBA.Heur2.Dridex.5.B90A646D.Gen is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What VBA.Heur2.Dridex.5.B90A646D.Gen virus can do?

  • The office file contains a macro
  • The office file contains anomalous features
  • The office file contains a macro with suspicious strings

How to determine VBA.Heur2.Dridex.5.B90A646D.Gen?


File Info:

crc32: 904AA0A5
md5: 4b0583be057cdae38cefc8aeb3969dfe
name: upload_file
sha1: 336652280bb6ea8f75798d4900588afadd193825
sha256: 5c8af7d1bee8d7037671533feee482eba4a6d9009bd3665a283217a94315c002
sha512: 4fe3e15b2c7a79f5c5a3f713bbe3da83e6f37a607d56fcef4d0ca7dd25e7ccd9bc540b403c34b90a62d17a8f7b35dac6d3e09332235e23881a8863ed44098f32
ssdeep: 1536:QswhvsQlYkEIbSkKBEqEXPgsRZmbaoFhZhR0cixIHm0P3J87zPvP:QswhvhlYkEIuPm3fNRZmbaoFhZhR0ci
type: Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1252, Name of Creating Application: Microsoft Excel, Create Time/Date: Tue Oct 6 09:00:16 2020, Last Saved Time/Date: Tue Oct 6 09:00:20 2020, Security: 0

Version Info:

0: [No Data]

VBA.Heur2.Dridex.5.B90A646D.Gen also known as:

MicroWorld-eScanVBA.Heur2.Dridex.5.B90A646D.Gen
FireEyeVBA.Heur2.Dridex.5.B90A646D.Gen
CAT-QuickHealOle.Trojan.A983320
ALYacTrojan.Downloader.XLS.gen
InvinceaTroj/DocDl-AAUX
SymantecTrojan.Mdropper
TrendMicro-HouseCallTROJ_FRS.0NA104J720
AvastOther:Malware-gen [Trj]
KasperskyHEUR:Trojan.Script.Generic
BitDefenderVBA.Heur2.Dridex.5.B90A646D.Gen
ViRobotXLS.Z.Agent.49664.KT
AegisLabTrojan.Script.Generic.4!c
Ad-AwareVBA.Heur2.Dridex.5.B90A646D.Gen
SophosTroj/DocDl-AAUX
F-SecureMalware.VBA/Dldr.Agent.nbfcu
DrWebW97M.DownLoader.4853
TrendMicroTROJ_FRS.0NA104J720
McAfee-GW-EditionRDN/Generic Downloader.x
EmsisoftVBA.Heur2.Dridex.5.B90A646D.Gen (B)
IkarusTrojan-Downloader.VBA.Agent
AviraVBA/Dldr.Agent.nbfcu
Antiy-AVLTrojan[Downloader]/MSOffice.Agent.ml
MicrosoftTrojanDownloader:O97M/Dridex.YT!MTB
ArcabitVBA.Heur2.Dridex.5.B90A646D.Gen
ZoneAlarmHEUR:Trojan.Script.Generic
GDataVBA.Heur2.Dridex.5.B90A646D.Gen
CynetMalicious (score: 85)
McAfeeRDN/Generic Downloader.x
MAXmalware (ai score=99)
ZonerProbably Heur.W97Obfuscated
ESET-NOD32VBA/TrojanDownloader.Agent.UOQ
RisingDownloader.Agent!8.B23 (TOPIS:E0:ekgBDtgBGcF)
YandexTrojan.Mofer.bUAsNv.53
FortinetVBA/Agent.A664!tr
AVGOther:Malware-gen [Trj]
Qihoo-360Generic/Trojan.Script.ed4

How to remove VBA.Heur2.Dridex.5.B90A646D.Gen?

VBA.Heur2.Dridex.5.B90A646D.Gen removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment