About “VBA/TrojanDownloader.Agent.UDB” infection

The VBA/TrojanDownloader.Agent.UDB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VBA/TrojanDownloader.Agent.UDB virus can do?

• At least one process apparently crashed during execution
• Injection (inter-process)
• Injection with CreateRemoteThread in a remote process
• Uses Windows utilities for basic functionality
• A potential decoy document was displayed to the user
• Network activity detected but not expressed in API logs

Related domains:

How to determine VBA/TrojanDownloader.Agent.UDB?

File Info:
crc32: A513C879
md5: 1685f9c85008e8adf908b436408006c2
name: upload_file
sha1: 62577168dcfdf5b7122e646be643e656bab7ff97
sha256: 3df0778f470b84e38456b274527ed0c96e04bef2fac95415bfe66d6c9265df88
sha512: a463a997d5907155c4bbc3711340e882b327d65aecc0a25b9778e4bb752de5ac5f99d301fbb8e972ab1a0fa607bce3ceffcf47f209abcbf9fdce523f8e1bc9d2
ssdeep: 3072:aj6yw1MgpQiBhGWb6esLbTh8YuyDRBFtdfGkABAQUt4yZhwE8:aHgtEWPsL/aTyT9GkxQUtjZhwE8
type: Composite Document File V2 Document, corrupt: Cannot read short stream

Version Info:
0: [No Data]

VBA/TrojanDownloader.Agent.UDB also known as:

How to remove VBA/TrojanDownloader.Agent.UDB?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.