VBC.EXE – Worm Ainslot

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

VBC.EXE – Worm Ainslot removal

FileMD5Virus Alias
VBC.EXE 6fcc891603cf1be1993cd8e65af551ba Worm Ainslot
VBC.EXE 6fcc891603cf1be1993cd8e65af551ba Suspicious File
VBC.EXE 6fcc891603cf1be1993cd8e65af551ba Trojan Androm
VBC.EXE 6fcc891603cf1be1993cd8e65af551ba Trojan Downloader
VBC.EXE 6fcc891603cf1be1993cd8e65af551ba Trojan Siggen
VBC.EXE 6fcc891603cf1be1993cd8e65af551ba Backdoor Andromeda

VBC.EXE size: 474213 bytes
VBC.EXE hash: 6FCC891603CF1BE1993CD8E65AF551BA

Created files:

%AppData%\vbc.exe

Autostart registry keys:

HKLM\Software\Microsoft\Active Setup\Installed Components\{BAAFEE9A-BFFF-EBDC-EFEC-4BEEB09F9FCA}\StubPath: %WinDir%\System32\config\Systemprofile\Application Data\vbc.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\Windows Firewall: %WinDir%\System32\config\Systemprofile\Application Data\vbc.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Windows Firewall: %WinDir%\System32\config\Systemprofile\Application Data\vbc.exe
HKCU\Software\Microsoft\Active Setup\Installed Components\{BAAFEE9A-BFFF-EBDC-EFEC-4BEEB09F9FCA}\StubPath: %WinDir%\System32\config\Systemprofile\Application Data\vbc.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Windows Firewall: %WinDir%\System32\config\Systemprofile\Application Data\vbc.exe

Detected by UnHackMe:

VBC.EXE
Default location: %APPDATA%\VBC.EXE

Dropper information:
MD5: 6fcc891603cf1be1993cd8e65af551ba
File size: 474213 bytes

Leave a Reply