Trojan

Should I remove “VB:Trojan.VBA.Agent.BHY”?

Malware Removal

The VB:Trojan.VBA.Agent.BHY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What VB:Trojan.VBA.Agent.BHY virus can do?

    How to determine VB:Trojan.VBA.Agent.BHY?

    
    

    File Info:

    crc32: CC23E066
    md5: 0aaa6da07143185ea99511a70126854b
    name: upload_file
    sha1: 7d74943cb7dddddc776999db3552a067d4a378e8
    sha256: e0f4c538666a39fae4e15adda386923b39d705ad2df7b7aff815ee6b1ffd8e7a
    sha512: 27fd5f97d4905ee2ff72bbfd535a475ea9a10a078ef3e2236fafc299b9d6457bdea96fabd155007c163a361260eebb66d875a1a01121f58ae631fb0b6d9629c4
    ssdeep: 3072:Hs9ufstRUUKSns8T00JSHUgteMJ8qMD7g7ncZaBj:Hs9ufsfgIf0pL7cZKj
    type: Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1252, Title: Ex., Author: Lxa Bonnet, Template: Normal.dotm, Revision Number: 1, Name of Creating Application: Microsoft Office Word, Create Time/Date: Fri Oct 2 09:05:00 2020, Last Saved Time/Date: Fri Oct 2 09:05:00 2020, Number of Pages: 1, Number of Words: 2494, Number of Characters: 14217, Security: 8

    Version Info:

    0: [No Data]

    VB:Trojan.VBA.Agent.BHY also known as:

    Elasticmalicious (high confidence)
    MicroWorld-eScanVB:Trojan.VBA.Agent.BHY
    McAfeeW97M/Downloader.dbv
    VIPRELooksLike.Macro.Malware.k (v)
    K7AntiVirusTrojan ( 005703b31 )
    K7GWTrojan ( 005703b31 )
    TrendMicroTrojan.W97M.EMOTET.SMBA
    CyrenW97M/Downldr.IE.gen!Eldorado
    SymantecW97M.Downloader
    TrendMicro-HouseCallTrojan.W97M.EMOTET.SMBA
    ClamAVDoc.Downloader.Emotet-9770127-0
    KasperskyHEUR:Trojan.MSOffice.SAgent.gen
    BitDefenderVB:Trojan.VBA.Agent.BHY
    ViRobotDOC.Z.Agent.177009
    AegisLabTrojan.MSWord.Generic.4!c
    Ad-AwareVB:Trojan.VBA.Agent.BHY
    EmsisoftTrojan-Downloader.Macro.Generic.BQ (A)
    ComodoMalware@#d7k1661appnu
    DrWebExploit.Siggen2.47275
    InvinceaMal/DocDl-K
    McAfee-GW-EditionW97M/Downloader.dbv
    FireEyeVB:Trojan.VBA.Agent.BHY
    SophosMal/DocDl-K
    IkarusTrojan.VBA.Agent
    AviraVBA/Dldr.Agent.byixy
    Antiy-AVLTrojan[Downloader]/MSOffice.Agent.ufy
    MicrosoftTrojanDownloader:O97M/Emotet.CSK!MTB
    ArcabitVB:Trojan.VBA.Agent.BHY
    ZoneAlarmHEUR:Trojan.MSOffice.SAgent.gen
    GDataVB:Trojan.VBA.Agent.BHY
    CynetMalicious (score: 85)
    AhnLab-V3Downloader/MSOffice.Generic
    ALYacTrojan.Downloader.DOC.Gen
    ESET-NOD32VBA/TrojanDownloader.Agent.UFY
    RisingMalware.ObfusVBA@ML.92 (VBA)
    SentinelOneDFI – Malicious OLE
    FortinetVBA/Agent.0CCA!tr
    AVGOther:Malware-gen [Trj]
    Qihoo-360virus.office.qexvmc.1085

    How to remove VB:Trojan.VBA.Agent.BHY?

    VB:Trojan.VBA.Agent.BHY removal tool
    • Download and install GridinSoft Anti-Malware.
    • Open GridinSoft Anti-Malware and perform a “Standard scan“.
    • Move to quarantine” all items.
    • Open “Tools” tab – Press “Reset Browser Settings“.
    • Select proper browser and options – Click “Reset”.
    • Restart your computer.

    About the author

    Paul Valéry

    I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

    Leave a Comment