How to remove “VB:Trojan.VBA.Downloader.WC”?

The VB:Trojan.VBA.Downloader.WC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What VB:Trojan.VBA.Downloader.WC virus can do?

How to determine VB:Trojan.VBA.Downloader.WC?


File Info:
crc32: D2892378
md5: 471959e5d991ab7e6ec5feb745156a8d
name: upload_file
sha1: e7f66903d1d35c3a9d8fe16e20c30609687e1c04
sha256: 053dea5bd693e7b747cfbd328462df32d620f245d436caa870699c448c47000d
sha512: 50d16845b5a68a9ef38b6c6726e5183be2ec5a8c1d9a070639b19172808840a20418f92813536083b3dc517353277b8719bfbd11a2fbebfaa45f232a6feeddbb
ssdeep: 3072:xnBeY5kb0TUNAuBqVPlB11nBkXyObGdqlMvGRb9f:xnEYOb0TUquBqt7nBKdxtRb9f
type: Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1252, Title: Dolorem., Author: Colia Rey, Template: Normal.dotm, Revision Number: 1, Name of Creating Application: Microsoft Office Word, Create Time/Date: Thu Oct 15 12:05:00 2020, Last Saved Time/Date: Thu Oct 15 12:05:00 2020, Number of Pages: 1, Number of Words: 2809, Number of Characters: 16014, Security: 8

Version Info:
0: [No Data]

VB:Trojan.VBA.Downloader.WC also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	W97m.Downloader.IYY
K7AntiVirus	Trojan ( 005703b31 )
K7GW	Trojan ( 005703b31 )
TrendMicro	Trojan.W97M.EMOTET.SMBA
Cyren	W97M/Downldr.IE.gen!Eldorado
Symantec	Trojan.Gen.2
ESET-NOD32	VBA/TrojanDownloader.Agent.UFY
TrendMicro-HouseCall	Trojan.W97M.EMOTET.SMBA
Kaspersky	HEUR:Trojan.MSOffice.SAgent.gen
BitDefender	W97m.Downloader.IYY
ViRobot	DOC.Z.Agent.140663
Rising	Malware.ObfusVBA@ML.89 (VBA)
Ad-Aware	W97m.Downloader.IYY
Emsisoft	Trojan-Downloader.Macro.Generic.BW (A)
F-Secure	Heuristic.HEUR/Macro.Downloader.MRYY.Gen
DrWeb	Exploit.Siggen2.49560
Invincea	Mal/DocDl-K
McAfee-GW-Edition	W97M/Downloader.dgk
FireEye	W97m.Downloader.IYY
Sophos	Mal/DocDl-K
Ikarus	Trojan-Downloader.VBA.Emotet
Avira	HEUR/Macro.Downloader.MRYY.Gen
Microsoft	TrojanDownloader:O97M/Emotet!rfn
Arcabit	W97m.Downloader.IYY
AhnLab-V3	Downloader/DOC.Emotet.S1304
ZoneAlarm	HEUR:Trojan.MSOffice.SAgent.gen
GData	Macro.Trojan-Downloader.Agent.AVL
Cynet	Malicious (score: 85)
ALYac	VB:Trojan.VBA.Downloader.WC
Tencent	Heur.Macro.Generic.h.6345c5f4
SentinelOne	DFI – Malicious OLE
Fortinet	VBA/Agent.AVL!tr
Qihoo-360	Generic/Trojan.Downloader.251

How to remove VB:Trojan.VBA.Downloader.WC?

VB:Trojan.VBA.Downloader.WC removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X