Should I remove “Win32:VB-AEMS [Trj]”?

The Win32:VB-AEMS [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32:VB-AEMS [Trj] virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Authenticode signature is invalid
• Attempts to disable or modify Explorer Folder Options
• Attempts to modify Explorer settings to prevent file extensions from being displayed
• Attempts to modify Explorer settings to prevent hidden files from being displayed

How to determine Win32:VB-AEMS [Trj]?

File Info:
name: 12880DEC7EB67E270163.mlw
path: /opt/CAPEv2/storage/binaries/5bc1baaee4960bf16ccb87bca6ac3c1fcd91333e7de036ba1542415be66a90da
crc32: 6F2F5750
md5: 12880dec7eb67e2701637b797b2e9037
sha1: a74705199d4d23ed919bdeb9213d704cb2f0271a
sha256: 5bc1baaee4960bf16ccb87bca6ac3c1fcd91333e7de036ba1542415be66a90da
sha512: 19ab723205bbff0774bd85e1a454a9a19e34e29d54513ffb2275f2961f1e93e8305fdfacabb31658a5314c2a771aeaecd81954d6eb5916529544368f82883532
ssdeep: 768:FMpQNwC3BEddsEqOt/hyJuQNwC3BEp+Rr799mHx:qeTce/U/hjeTqwq
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T118830843BB52C580E54A6679288387B96753FD70AF037A075160FF3F3AB35A14E91B22
sha3_384: 73a013c5f90669305f62004684af90be6409b98b0d602a16247fdacc4ad92a36ffdf4b50516bf4e607aec402538df312
ep_bytes: 68186d4000e8f0ffffff000000000000
timestamp: 2009-01-06 03:24:42

Version Info:
Translation: 0x0409 0x04b0
ProductName: Microsoft Windows
FileVersion: 1.00.0050
ProductVersion: 1.00.0050
InternalName: music
OriginalFilename: music.exe

Win32:VB-AEMS [Trj] also known as:

How to remove Win32:VB-AEMS [Trj]?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.