Categories: Malware

How to remove “VBS:Agent-DD [Trj]”?

The VBS:Agent-DD [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VBS:Agent-DD [Trj] virus can do?

At least one process apparently crashed during execution
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine VBS:Agent-DD [Trj]?


File Info:
name: 973B31527B653BCA36F3.mlwpath: /opt/CAPEv2/storage/binaries/0d0219ab3e489707106075ed48f1233b8118b6e9689944590c8c1e975522e879crc32: 56A560B7md5: 973b31527b653bca36f39e39832473b6sha1: 35336416e11217ec70c8ea267483ace7e934a3easha256: 0d0219ab3e489707106075ed48f1233b8118b6e9689944590c8c1e975522e879sha512: b9d7ad13f29c01a14519e209d2bfb2691973c0a24f412c49d0ebbb50f01e35af8d93bee3100cf87e168eddb7218bb014f2d7d56fd69b092b0607a3caf418b3eassdeep: 3072:orR90YqQWxDV1Vsbrd/SCoOORE7vrvFwFwyf9wvGmJ8epKRHLuNToISoyMQ:oraQesbc2rvFQwe9pwKwvSoyMQtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T10014BE11B7C289E7D089073025FF57B7E1B8BF3127602697BB496F6A2C74093E94219Bsha3_384: 32bbdd92a017a17473c6f0dbc9bfa5c57692780a0df312fdd4614b078e390df409673fddb885726aa222e7fbcfe3ff0dep_bytes: 68f8124000e8bc1100ff000000000000timestamp: 2009-03-20 16:00:40
Version Info:
Translation: 0x0804 0x04b0ProductName: 工程1FileVersion: 1.00ProductVersion: 1.00InternalName: 工程1OriginalFilename: 工程1.exe

VBS:Agent-DD [Trj] also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	VBS.Heur2.Snake.2.37A4B9C1.Gen
FireEye	Generic.mg.973b31527b653bca
McAfee	GenericRXAA-FA!973B31527B65
Cylance	Unsafe
Cybereason	malicious.27b653
BitDefenderTheta	Gen:NN.ZevbaF.34294.mm3@auwuCShb
Symantec	ML.Attribute.HighConfidence
Kaspersky	Trojan.VBS.Small.bg
BitDefender	VBS.Heur2.Snake.2.37A4B9C1.Gen
NANO-Antivirus	Trojan.Script.Small.bmvoep
Avast	VBS:Agent-DD [Trj]
Rising	Trojan.DL.Win32.VB.zrz (CLASSIC)
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
SentinelOne	Static AI – Malicious PE
Emsisoft	VBS.Heur2.Snake.2.37A4B9C1.Gen (B)
Ikarus	Trojan.VBS.Dropper
GData	VBS.Heur2.Snake.2.37A4B9C1.Gen
Avira	VBS/Small.bga
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
ALYac	VBS.Heur2.Snake.2.37A4B9C1.Gen
APEX	Malicious
Tencent	Vbs.Trojan.Small.Hsil
MAX	malware (ai score=83)
AVG	VBS:Agent-DD [Trj]
CrowdStrike	win/malicious_confidence_90% (D)