Trojan

VB:Trojan.VBA.Agent.BHW (file analysis)

Malware Removal

The VB:Trojan.VBA.Agent.BHW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What VB:Trojan.VBA.Agent.BHW virus can do?

    How to determine VB:Trojan.VBA.Agent.BHW?

    
    

    File Info:

    crc32: D0D0F703
    md5: 9b0503dc465292f397abc3a55de1a180
    name: upload_file
    sha1: 35ab7d633b84e288003c6229c49d1a6547ea1653
    sha256: 152bad8f5895221655a0046abb81dcc4b47803101d8b929bfed1baa9d4e4bb94
    sha512: 346c9e01111c4684a0fbc24e76c3042b6f5527a71c27d8782ca9a07657be026bb4d9c9b4238fec43f7bf119975f2ea0176183829319867ae5db2eb6777df0338
    ssdeep: 3072:dLAzJ85LuMoeffRcescowUYrktrkWj7Gqz:48B2r1HYkKWjjz
    type: Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1252, Title: Omnis., Author: Chlos Da silva, Template: Normal.dotm, Revision Number: 1, Name of Creating Application: Microsoft Office Word, Create Time/Date: Mon Sep 28 15:26:00 2020, Last Saved Time/Date: Mon Sep 28 15:26:00 2020, Number of Pages: 1, Number of Words: 2426, Number of Characters: 13830, Security: 8

    Version Info:

    0: [No Data]

    VB:Trojan.VBA.Agent.BHW also known as:

    Elasticmalicious (high confidence)
    MicroWorld-eScanVB:Trojan.VBA.Agent.BHW
    FireEyeVB:Trojan.VBA.Agent.BHW
    CAT-QuickHealOLE.Emotet.39274
    ALYacTrojan.Downloader.DOC.Gen
    K7AntiVirusTrojan ( 005703b31 )
    K7GWTrojan ( 005703b31 )
    InvinceaTroj/DocDl-AASP
    CyrenW97M/Downldr.IE.gen!Eldorado
    SymantecW97M.Downloader
    TrendMicro-HouseCallTrojan.W97M.EMOTET.TIOIBELH
    AvastOther:Malware-gen [Trj]
    ClamAVDoc.Malware.Emotet-9768660-0
    KasperskyHEUR:Trojan-Downloader.Script.Generic
    BitDefenderVB:Trojan.VBA.Agent.BHW
    NANO-AntivirusTrojan.Script.Downlowder.hxnkcx
    ViRobotDOC.Z.Agent.153494
    AegisLabTrojan.MSWord.Generic.4!c
    Ad-AwareVB:Trojan.VBA.Agent.BHW
    SophosTroj/DocDl-AASP
    ComodoMalware@#24a03on59n41n
    F-SecureMalware.W97M/Agent.6446613
    DrWebExploit.Siggen2.45227
    VIPRELooksLike.Macro.Malware.k (v)
    TrendMicroTrojan.W97M.EMOTET.TIOIBELH
    McAfee-GW-EditionW97M/Downloader.dbv
    EmsisoftTrojan-Downloader.Macro.Generic.BL (A)
    SentinelOneDFI – Malicious OLE
    AviraW97M/Agent.6446613
    Antiy-AVLTrojan[Downloader]/MSOffice.Agent.khq
    MicrosoftTrojanDownloader:O97M/Emotet.CSK!MTB
    ArcabitVB:Trojan.VBA.Agent.BHW
    ZoneAlarmHEUR:Trojan-Downloader.Script.Generic
    GDataMacro.Trojan-Downloader.Agent.AVL
    CynetMalicious (score: 85)
    AhnLab-V3Downloader/DOC.Emotet.S1296
    McAfeeW97M/Downloader.dbv
    VBA32TrojanDownloader.O97M.Emotet.CSK
    ESET-NOD32GenScript.KHQ
    RisingMalware.ObfusVBA@ML.87 (VBA)
    IkarusTrojan.VBA.Agent
    FortinetVBA/Agent.DBV!tr.dldr
    AVGOther:Malware-gen [Trj]
    PandaO97M/Downloader
    Qihoo-360virus.office.qexvmc.1080

    How to remove VB:Trojan.VBA.Agent.BHW?

    VB:Trojan.VBA.Agent.BHW removal tool
    • Download and install GridinSoft Anti-Malware.
    • Open GridinSoft Anti-Malware and perform a “Standard scan“.
    • Move to quarantine” all items.
    • Open “Tools” tab – Press “Reset Browser Settings“.
    • Select proper browser and options – Click “Reset”.
    • Restart your computer.

    About the author

    Paul Valéry

    I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

    Leave a Comment