VBA:Logan.870 (file analysis)

The VBA:Logan.870 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What VBA:Logan.870 virus can do?

How to determine VBA:Logan.870?


File Info:
crc32: 34555423
md5: 12cbd7778023a9803670844090fea33d
name: upload_file
sha1: 2724759f3c5c7308e5be5b4a9cdb2e82b1cf0cba
sha256: ac83cacfe12a917ff503b86b387287b4ff2318ebe6aef0c60c43e2c5a2860b95
sha512: 8be06f0db586067975acf5b88cee3736e87db341892cb6c420de16fd8faf19de9c2bf048b7df45b859abe7fab5f3665e1358aee7845e15c6ba23b4630961695a
ssdeep: 3072:AZs1MqXQQ42/Bn/lwTy9ufstRUUKSns8T00JSHUgteMJ8qMD7grlFFOfM12v7HpF:t9ufsfgIf0pLPFOfM1M7Eu
type: Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1252, Title: Sint., Author: Matt.o Baron, Template: Normal.dotm, Last Saved By: Sacha Le roux, Revision Number: 1, Name of Creating Application: Microsoft Office Word, Create Time/Date: Thu Oct 29 11:27:00 2020, Last Saved Time/Date: Thu Oct 29 11:27:00 2020, Number of Pages: 1, Number of Words: 15106, Number of Characters: 86105, Security: 8

Version Info:
0: [No Data]

VBA:Logan.870 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	VBA:Logan.870
FireEye	VBA:Logan.870
CAT-QuickHeal	W97M.Emotet.Heur
McAfee	W97M/Downloader.dha
AegisLab	Trojan.MSOffice.SAgent.4!c
Cyren	W97M/Agent.LD.gen!Eldorado
Symantec	W97M.Downloader
Avast	VBS:Malware-gen
ClamAV	Doc.Downloader.Generic-9785156-0
Kaspersky	HEUR:Trojan.MSOffice.SAgent.gen
BitDefender	VBA:Logan.870
ViRobot	DOC.Z.Agent.294680
Tencent	Heur.Macro.Generic.h.c3fefa8f
Ad-Aware	VBA:Logan.870
F-Secure	Malware.W97M/Agent.5906913
DrWeb	Exploit.Siggen2.60075
Invincea	Troj/DocDl-ABBZ
McAfee-GW-Edition	W97M/Downloader.dha
SentinelOne	DFI – Malicious OLE
Avira	W97M/Agent.5906913
Antiy-AVL	Trojan[Downloader]/MSOffice.Agent
Gridinsoft	Trojan.U.Emotet.lu
Arcabit	VBA:Logan.870
AhnLab-V3	Downloader/MSOffice.Generic
ALYac	Trojan.GenericKD.34991659
ESET-NOD32	VBA/TrojanDownloader.Agent.UFY
Rising	Malware.ObfusVBA@ML.87 (VBA)
Ikarus	Trojan-Downloader.VBA.Emotet
Fortinet	VBA/Agent.BIQ!tr
AVG	VBS:Malware-gen
Qihoo-360	virus.office.qexvmc.1095

How to remove VBA:Logan.870?

VBA:Logan.870 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X