PWSteal.VB.HE

By Domesticus in Backdoors

Threat Scorecard

Ranking:	18,515
Threat Level:	80 % (High)
Infected Computers:	108

First Seen:	August 25, 2011
Last Seen:	March 16, 2024
OS(es) Affected:	Windows

PWSteal.VB.HE is a hazardous backdoor Trojan designed by hackers to penetrate into the affected computer system surreptitiously and install itself in the corrupted machine without the infected PC user's consent and awareness. PWSteal.VB.HE is created to fulfill numerous malevolent activities on the targeted computer system. PWSteal.VB.HE can make the compromised PC system more vulnerable to additional malware infections and invade the PC user's security and privacy. PWSteal.VB.HE infiltrates into the PC system with the help of other malware threats and comes bundled with third-party applications. PWSteal.VB.HE enables remote attackers to obtain complete access and control over the affected PC. When PWSteal.VB.HE is installed, it will run surreptitiously in the system's background. PWSteal.VB.HE is able to receive instructions and commands from remote hackers, and will install and execute malicious files, as well as delete and transmit them on the machine. PWSteal.VB.HE will steal the computer user's confidential data like user names, passwords and credit card information and transmit this information to remote hackers. PWSteal.VB.HE will also use the targeted computer as part of spam email bot attacks, Denial of Service (DoS Attacks) and other malevolent activities. Remove PWSteal.VB.HE immediately after detection.

Table of Contents

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
Sophos	Mal/EncPk-RM
BitDefender	Gen:Trojan.Heur.FU.aq0@aiZPDnji
NOD32	a variant of Win32/Chepdu.AJ
AVG	BackDoor.Delf.19.A
Fortinet	W32/Koblu.FA!tr
Ikarus	Trojan.Backdoor.Delf
AntiVir	TR/Sasfis.2.41
Comodo	TrojWare.Win32.TrojanDownloader.Murlo.~JH2
Kaspersky	Trojan.Win32.Sasfis.caxy
AVG	Generic4.BFNF
AhnLab-V3	Adware/Win32.EZula
AntiVir	Adware/Agent.EZula.mai
BitDefender	Adware.Generic.166609
Kaspersky	not-a-virus:AdWare.Win32.EZula.mai
McAfee	Artemis!388B7658A666

SpyHunter Detects & Remove PWSteal.VB.HE

File System Details

PWSteal.VB.HE may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	cctsp.exe	e8bffebcb46bc7d570429ca2664d8f47	8
Name: cctsp.exe MD5: e8bffebcb46bc7d570429ca2664d8f47 Size: 2.64 MB (2641920 bytes) Detections: 8 Type: Executable File Path: N:\Program Files\DVD Rebuilder Easy\cinema craft encoder sp v2.67.00.27\cctsp.exe Group: Malware file Last Updated: March 17, 2024
2.	ven.exe	5e448a13915999dd112094bcf0b5ff05	4
Name: ven.exe MD5: 5e448a13915999dd112094bcf0b5ff05 Size: 877.05 KB (877056 bytes) Detections: 4 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: August 30, 2011
3.	svchost.exe	e1e23b7866d4c19ec45afb23cb7b6a6a	3
Name: svchost.exe MD5: e1e23b7866d4c19ec45afb23cb7b6a6a Size: 178.68 KB (178688 bytes) Detections: 3 Type: Executable File Path: %WINDIR%\Sxc Group: Malware file Last Updated: August 30, 2011
4.	terlcw32.dll	3bcc7fae229ca9102dafd80819fc197f	3
Name: terlcw32.dll MD5: 3bcc7fae229ca9102dafd80819fc197f Size: 35.84 KB (35840 bytes) Detections: 3 Type: Dynamic link library Group: Malware file Last Updated: September 1, 2011
5.	wfrmgr.exe	5d046e2233caf9a4415021834dfa5458	2
Name: wfrmgr.exe MD5: 5d046e2233caf9a4415021834dfa5458 Size: 246.66 KB (246662 bytes) Detections: 2 Type: Executable File Path: %WINDIR%\system32 Group: Malware file Last Updated: March 2, 2019
6.	f5e89502-f71d-fd67-5e3e-a3028539dffc.dll	3c9bbbec86aa25b3e3301f22f36332ec	2
Name: f5e89502-f71d-fd67-5e3e-a3028539dffc.dll MD5: 3c9bbbec86aa25b3e3301f22f36332ec Size: 2.71 MB (2715648 bytes) Detections: 2 Type: Dynamic link library Path: %WINDIR%\system32 Group: Malware file Last Updated: August 30, 2011
7.	queryscan171.exe	9daa468afd1e7f34bd68fc3b56481d9c	2
Name: queryscan171.exe MD5: 9daa468afd1e7f34bd68fc3b56481d9c Size: 26.11 KB (26112 bytes) Detections: 2 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data\QueryScan Group: Malware file Last Updated: August 30, 2011
8.	api-ms-win-core-fibers-l1-1-032.dll	f9f88f91fbaa6809da3d942ef7f09bd5	2
Name: api-ms-win-core-fibers-l1-1-032.dll MD5: f9f88f91fbaa6809da3d942ef7f09bd5 Size: 437.24 KB (437248 bytes) Detections: 2 Type: Dynamic link library Path: %WINDIR%\system32 Group: Malware file Last Updated: August 30, 2011
9.	0E4736D04A8.exe	0f201b5b01793aead8c28ee7f0b56782	2
Name: 0E4736D04A8.exe MD5: 0f201b5b01793aead8c28ee7f0b56782 Size: 184.37 KB (184372 bytes) Detections: 2 Type: Executable File Path: %SystemDrive%\SystemSrv Group: Malware file Last Updated: August 30, 2011
10.	R_uG_3mY.dll	388b7658a6667e92a60fdb2bfc0273ae	1
Name: R_uG_3mY.dll MD5: 388b7658a6667e92a60fdb2bfc0273ae Size: 2.12 MB (2127872 bytes) Detections: 1 Type: Dynamic link library Path: %WINDIR%\system32 Group: Malware file Last Updated: September 1, 2011
11.	25478.dll	4f32ec7956ceff332ef8b5f625d093df	1
Name: 25478.dll MD5: 4f32ec7956ceff332ef8b5f625d093df Size: 802.81 KB (802816 bytes) Detections: 1 Type: Dynamic link library Path: %WINDIR%\system32 Group: Malware file Last Updated: August 30, 2011
12.	nqclbefjpuoojsh.exe	ddb993e24052f49e8ea612a6b6b1c794	1
Name: nqclbefjpuoojsh.exe MD5: ddb993e24052f49e8ea612a6b6b1c794 Size: 4.95 MB (4953600 bytes) Detections: 1 Type: Executable File Path: %ALLUSERSPROFILE%\hfmkfoxlxkxwd Group: Malware file Last Updated: August 30, 2011
13.	svcdotnet.exe	d105dadb9790ec11d7c20dd185e8d91a	1
Name: svcdotnet.exe MD5: d105dadb9790ec11d7c20dd185e8d91a Size: 521.21 KB (521216 bytes) Detections: 1 Type: Executable File Path: %WINDIR%\svcdotnet Group: Malware file Last Updated: August 30, 2011
14.	svchost.exe	af65b8833dac7a4886fb9545aa777f4e	1
Name: svchost.exe MD5: af65b8833dac7a4886fb9545aa777f4e Size: 36.86 KB (36864 bytes) Detections: 1 Type: Executable File Path: %WINDIR%\system32 Group: Malware file Last Updated: August 26, 2011
15.	poowrprof.dll	51bf0b182b2809d25feeca2de271c8e3	1
Name: poowrprof.dll MD5: 51bf0b182b2809d25feeca2de271c8e3 Size: 61.44 KB (61440 bytes) Detections: 1 Type: Dynamic link library Path: %WINDIR%\system32 Group: Malware file Last Updated: August 30, 2011
16.	ctfmonqak.exe	481477a4e9bfa8fcf089d24be46ff003	1
Name: ctfmonqak.exe MD5: 481477a4e9bfa8fcf089d24be46ff003 Size: 11.77 KB (11776 bytes) Detections: 1 Type: Executable File Path: %PROGRAMFILES%\Internet Explorer Group: Malware file Last Updated: September 3, 2011
17.	urvfu.dll
Name: urvfu.dll Type: Dynamic link library Group: Malware file
18.	svchost.exe
Name: svchost.exe Type: Executable File Group: Malware file
19.	poowrprof.dll
Name: poowrprof.dll Type: Dynamic link library Group: Malware file
20.	25478.dll
Name: 25478.dll Type: Dynamic link library Group: Malware file
21.	f5e89502-f71d-fd67-5e3e-a3028539dffc.dll
Name: f5e89502-f71d-fd67-5e3e-a3028539dffc.dll Type: Dynamic link library Group: Malware file
22.	ven.exe
Name: ven.exe Type: Executable File Group: Malware file
23.	R_uG_3mY.dll
Name: R_uG_3mY.dll Type: Dynamic link library Group: Malware file
24.	queryscan171.exe
Name: queryscan171.exe Type: Executable File Group: Malware file
25.	api-ms-win-core-fibers-l1-1-032.dll
Name: api-ms-win-core-fibers-l1-1-032.dll Type: Dynamic link library Group: Malware file
26.	fzpu5.dll
Name: fzpu5.dll Type: Dynamic link library Group: Malware file
27.	WinUpdating.exe
Name: WinUpdating.exe Type: Executable File Group: Malware file
28.	0E4736D04A8.exe
Name: 0E4736D04A8.exe Type: Executable File Group: Malware file
29.	svcdotnet.exe
Name: svcdotnet.exe Type: Executable File Group: Malware file
30.	cctsp.exe
Name: cctsp.exe Type: Executable File Group: Malware file
31.	nqclbefjpuoojsh.exe
Name: nqclbefjpuoojsh.exe Type: Executable File Group: Malware file

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

PWSteal.VB.HE

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove PWSteal.VB.HE

File System Details

Submit Comment

Trending

SaveFrom.net

Softcnapp

Videovor.com

Most Viewed

Discord Shows Black Screen when Sharing Screen

How To Fix 'Printer Driver is Unavailable' Error

What is Msedge.exe?