Virus.Win32.VB.gh removal

The Virus.Win32.VB.gh is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Virus.Win32.VB.gh virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine Virus.Win32.VB.gh?


File Info:
name: D25478932E73F87EB553.mlw
path: /opt/CAPEv2/storage/binaries/a1104ca4198818c2cdf87d18ef2e8f93723056ec5d2237668d76d16a450aefff
crc32: 43A1E2F1
md5: d25478932e73f87eb5530d73285a6435
sha1: 7445a769ccaf81a111e50fc1fec66c3723a1f3aa
sha256: a1104ca4198818c2cdf87d18ef2e8f93723056ec5d2237668d76d16a450aefff
sha512: f01219b6b9845cf45dc5df6bad2752555b4fc9087d6bb7f3ad4fabc324ebe95899761668558ad2907b0fb13da050fa294e691d4d8350958a110de6a1efe791f1
ssdeep: 12288:s6QXqw9MgKnxYaGu5jjipxrx0r3d6QXqw9MgKnxYaGu5jjW:sDKnxYaXJiUJDKnxYaXJW
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T105F45B10F785D1B6DE9743B119298A2E5737EE3213208EDBA3583D161DB17C2AC713AB
sha3_384: 1099163e15bc522df8c09168eabe493cb422a0698bc27fdf638d20aae573883770fda959bc0535ca97b7853852529f69
ep_bytes: f7f133c983f8010f95c181c182000000
timestamp: 2006-10-23 08:01:42

Version Info:
0: [No Data]

Virus.Win32.VB.gh also known as:

Bkav	W32.AIDetect.malware2
FireEye	Generic.mg.d25478932e73f87e
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Baidu	Win32.Trojan.VB.t
Cyren	W32/VBcrypt.BX.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
ClamAV	Win.Worm.Virfire-6814275-0
Avast	Win32:VB-FBX
Sophos	Generic ML PUA (PUA)
DrWeb	Trojan.VbCrypt.250
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
VBA32	Virus.Win32.VB.gh
Malwarebytes	Malware.AI.3313949026
Rising	Dropper.Agent!1.D2B7 (CLASSIC)
Ikarus	Trojan.Crypt
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/VbCrypt.AA!tr
AVG	Win32:VB-FBX

How to remove Virus.Win32.VB.gh?

Virus.Win32.VB.gh removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X