Trojan.AgentMB.VB

By SpideyMan in Trojans

Trojan.AgentMB.VB is a mischievous computer trojan that invades your PC system without your knowledge through vulnerabilities or security program exploits. When Trojan.AgentMB.VB runs on a machine, it starts executing its harmful actions, which usually carry some real damage and are able to result in many computer problems. Trojan.AgentMB.VB can create an executable file in the fake Recycle Bin folder to hide its existence on the computer system. Trojan.AgentMB.VB has to be removed from the PC as soon as possible.

File System Details

Trojan.AgentMB.VB may create the following file(s):

Expand All | Collapse All

#	File Name	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	%Windir%\assembly\assembly.exe
Name: %Windir%\assembly\assembly.exe Type: Executable File
2.	%ProgramFiles%\Online Services\Online Services.exe
Name: %ProgramFiles%\Online Services\Online Services.exe Type: Executable File
3.	%ProgramFiles%\microsoft frontpage\microsoft frontpage.exe
Name: %ProgramFiles%\microsoft frontpage\microsoft frontpage.exe Type: Executable File
4.	%ProgramFiles%\Program Files.exe
Name: %ProgramFiles%\Program Files.exe Type: Executable File
5.	%ProgramFiles%\xerox\xerox.exe
Name: %ProgramFiles%\xerox\xerox.exe Type: Executable File
6.	%ProgramFiles%\WindowsUpdate\WindowsUpdate.exe
Name: %ProgramFiles%\WindowsUpdate\WindowsUpdate.exe Type: Executable File
7.	c:\RECYCLER\RECYCLER.exe
Name: c:\RECYCLER\RECYCLER.exe Type: Executable File
8.	%Windir%\AppPatch\AppPatch.exe
Name: %Windir%\AppPatch\AppPatch.exe Type: Executable File
9.	%ProgramFiles%\NetMeeting\NetMeeting.exe
Name: %ProgramFiles%\NetMeeting\NetMeeting.exe Type: Executable File
10.	%ProgramFiles%\Messenger\Messenger.exe
Name: %ProgramFiles%\Messenger\Messenger.exe Type: Executable File
11.	%ProgramFiles%\MSN\MSN.exe
Name: %ProgramFiles%\MSN\MSN.exe Type: Executable File
12.	%ProgramFiles%\Web Publish\Web Publish.exe
Name: %ProgramFiles%\Web Publish\Web Publish.exe Type: Executable File
13.	%ProgramFiles%\Windows NT\Windows NT.exe
Name: %ProgramFiles%\Windows NT\Windows NT.exe Type: Executable File
14.	c:\System\System.exe
Name: c:\System\System.exe Type: Executable File
15.	%Windir%\addins\addins.exe
Name: %Windir%\addins\addins.exe Type: Executable File
16.	%ProgramFiles%\MSN Gaming Zone\MSN Gaming Zone.exe
Name: %ProgramFiles%\MSN Gaming Zone\MSN Gaming Zone.exe Type: Executable File
17.	%ProgramFiles%\Outlook Express\Outlook Express.exe
Name: %ProgramFiles%\Outlook Express\Outlook Express.exe Type: Executable File
18.	%ProgramFiles%\Movie Maker\Movie Maker.exe
Name: %ProgramFiles%\Movie Maker\Movie Maker.exe Type: Executable File
19.	%ProgramFiles%\Uninstall Information\Uninstall Information.exe
Name: %ProgramFiles%\Uninstall Information\Uninstall Information.exe Type: Executable File
20.	%ProgramFiles%\Windows Media Player\Windows Media Player.exe
Name: %ProgramFiles%\Windows Media Player\Windows Media Player.exe Type: Executable File
21.	%ProgramFiles%\WinPcap\WinPcap.exe
Name: %ProgramFiles%\WinPcap\WinPcap.exe Type: Executable File
22.	c:\RECYCLER\S-1-5-21-606747145-764733703-839522115-1003\S-1-5-21-606747145-764733703-839522115-1003.exe
Name: c:\RECYCLER\S-1-5-21-606747145-764733703-839522115-1003\S-1-5-21-606747145-764733703-839522115-1003.exe Type: Executable File

Registry Details

Trojan.AgentMB.VB may create the following registry entry or registry entries:

HKEY..\..\..\..{RegistryKeys}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\dmboot.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\NDIS Wrapper

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\Boot file system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\DcomLaunch

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\DnsCache

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\LanmanServer

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\Messenger

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\ip6fw.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\dmadmin

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\NDIS

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\NetBIOS

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\CryptSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\dmserver

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\File system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\LmHosts

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\HelpSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\Dhcp

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\dmio.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\Ndisuio

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\Browser

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\dmload.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\EventLog

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\LanmanWorkstation

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\ipnat.sys

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Trojan.AgentMB.VB

File System Details

Registry Details

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen