Malware

What is “Win32:VB-AENC [Trj]”?

Malware Removal

The Win32:VB-AENC [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32:VB-AENC [Trj] virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Behavioural detection: Injection (inter-process)
  • Attempts to disable Windows Auto Updates
  • Anomalous binary characteristics
  • Attempts to modify Explorer settings to prevent hidden files from being displayed

How to determine Win32:VB-AENC [Trj]?


File Info:

name: CCE7A62D5466D507C620.mlw
path: /opt/CAPEv2/storage/binaries/58a466e2bc4ccac2b24ad5ec70eade55880490053cfc8817d6aae36e2cdd1e25
crc32: ABF4ACB8
md5: cce7a62d5466d507c620ff3477dfe819
sha1: ec398d05c150096a450d3acc88f06c5c34d4cb5b
sha256: 58a466e2bc4ccac2b24ad5ec70eade55880490053cfc8817d6aae36e2cdd1e25
sha512: 28ce22ac1a57c0cf95df6512a76840b4027a7ba3911668867ee22031b39fed2c56ffea081914fb1aecc40de74a90e6b41b91766ff31e48071a2344b145d5e611
ssdeep: 6144:Run/ayc5mFpvMTuGSouFQIlzBI1Iq3Fdrj6DUKSpFwEb:M/nc5mFpxzBI1X3Fdrj6DUKSpt
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B724D93562C0FB3AE1A2C7F439D983925429AC3234B5680BF7C11B3577E5E97962072B
sha3_384: 4019127728906c19c91c71fc53a460ebc1aa799cc156beed7c3c4ea15b90d2e94542d19b41eebc89046cd2bbd96cc7a4
ep_bytes: 688c3a4000e8f0ffffff000000000000
timestamp: 2012-09-19 18:17:15

Version Info:

Translation: 0x0409 0x04b0
ProductName: Cephalalgy
FileVersion: 0.94
ProductVersion: 0.94
InternalName: enterotome
OriginalFilename: enterotome.exe

Win32:VB-AENC [Trj] also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Barys.950
CAT-QuickHealTrojan.Beebone.D
SkyhighBehavesLike.Win32.VBObfus.dm
McAfeeGenDownloader.rv
MalwarebytesGeneric.Malware.AI.DDS
VIPREGen:Variant.Barys.950
SangforSuspicious.Win32.Save.vb
K7AntiVirusEmailWorm ( 0054d10f1 )
K7GWEmailWorm ( 0054d10f1 )
CrowdStrikewin/malicious_confidence_100% (D)
BaiduWin32.Trojan.VBObfus.f
VirITTrojan.Win32.Zyx.OD
SymantecW32.Changeup!gen35
tehtrisGeneric.Malware
ESET-NOD32Win32/Pronny.EH
APEXMalicious
TrendMicro-HouseCallWORM_VOBFUS.SM02
ClamAVWin.Trojan.Vobfus-28
KasperskyWorm.Win32.Vobfus.bfvm
BitDefenderGen:Variant.Barys.950
NANO-AntivirusTrojan.Win32.WBNA.cihuhh
SUPERAntiSpywareTrojan.Agent/Gen-Dropper
AvastWin32:VB-AENC [Trj]
TencentWorm.Win32.Vobfus.co
TACHYONWorm/W32.Vobfus.225280.C
SophosMal/SillyFDC-W
F-SecureTrojan.TR/Barys.U
DrWebTrojan.VbCrypt.60
TrendMicroWORM_VOBFUS.SM02
FireEyeGeneric.mg.cce7a62d5466d507
EmsisoftGen:Variant.Barys.950 (B)
IkarusWorm.Win32.Vobfus
JiangminWorm/Vobfus.ilf
GoogleDetected
AviraTR/Barys.U
VaristW32/Vobfus.BE.gen!Eldorado
Antiy-AVLWorm/Win32.WBNA.gen
MicrosoftWorm:Win32/Vobfus
XcitiumTrojWare.Win32.Pronny.EE@4qvpy8
ArcabitTrojan.Barys.950
ViRobotWorm.Win32.A.Vobfus.225280
ZoneAlarmWorm.Win32.Vobfus.bfvm
GDataGen:Variant.Barys.950
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Vobfus.R36953
VBA32BScope.Trojan.Diple
MAXmalware (ai score=80)
Cylanceunsafe
PandaW32/Vobfus.GEW.worm
RisingWorm.Pronny!8.2E9 (TFE:3:pzIaYf5dWZK)
YandexTrojan.GenAsa!vmHZB8087iQ
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.4550689.susgen
FortinetW32/VBKrypt.C!tr
BitDefenderThetaGen:NN.ZevbaF.36802.nm0@aeYHHrji
AVGWin32:VB-AENC [Trj]
Cybereasonmalicious.d5466d
DeepInstinctMALICIOUS
alibabacloudWorm:Win/Vobfus.2a6a1306

How to remove Win32:VB-AENC [Trj]?

Win32:VB-AENC [Trj] removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment