What is "Win32:VB-AAHT [Trj]"?

The Win32:VB-AAHT [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32:VB-AAHT [Trj] virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32:VB-AAHT [Trj]?


File Info:
crc32: 51DF0EC8
md5: a8d46f6bfee221cd95bc9198cc650f2e
name: A8D46F6BFEE221CD95BC9198CC650F2E.mlw
sha1: d826d35515b39f86e2df68b0e8662988b96a1536
sha256: 078cc05bb6e3eee4897789ed7451ee4da5966959943e254c9e7681444caa2520
sha512: 589f63b22e96330323b19b3d8e100aaeedc6f4bc64fda938f1796f358280e27c0e1a7c8e4d819ab5e3bce3b40bdcd4febf0c46ab9582d686547442cc5db952de
ssdeep: 768:Ob18G5Pla9zTRWMlnAeOKLmSNGHukG9/qFn2DPoo2zBiox4a//vVfyj0EKUcVLS:85Na9JLrGHuD9y0Uo25//vVfyr6/6
type: PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: 
Assembly Version: 1.0.7.0
InternalName: Client.dll
FileVersion: 1.0.7.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: 
ProductVersion: 1.0.7.0
FileDescription: 
OriginalFilename: Client.dll

Win32:VB-AAHT [Trj] also known as:

Elastic	malicious (high confidence)
DrWeb	BackDoor.AsyncRATNET.1
ESET-NOD32	a variant of MSIL/Agent.CFQ
Avast	Win32:VB-AAHT [Trj]
Cynet	Malicious (score: 100)
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	Artemis!Trojan
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Artemis!A8D46F6BFEE2
VBA32	Trojan.MSIL.gen.15
Ikarus	Trojan.MSIL.Agent
AVG	Win32:VB-AAHT [Trj]

How to remove Win32:VB-AAHT [Trj]?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Win32:VB-AAHT [Trj]”?