Home / malware

PDF

Trojan:VBS/Crypter.B

First posted on 21 November 2013.
Source: Microsoft

Aliases :

There are no other names known for Trojan:VBS/Crypter.B.

Explanation :

Threat behavior

Trojan:VBS/Crypter.B is detection for malicious Visual Basic script (VBS) files with a malware encryptor that uses base64 encoding to obfuscate its files.

Installation
Trojan:VBS/Crypter.B usually arrives on your PC in a spam email attachment. It can also be installed by other malware. We have seen this threat use the following file names:

• abu dhabi sport 3 HD.vbs
• aljazeera-sport+2.vbs
• Cool.vbs
• Fantasy Premier League.vbs
• kpcgrhynko.vbs
• njptmwtkre.vbe
• qecddxsldm.vbs
• rbuhhdgpds.vbs

Trojan:VBS/Crypter.B uses encryption known as €œS_22-worm Crypter v1.0€ to make malware more difficult to detect and remove.



Analysis by Patrik Vicol Symptoms

Alerts from your security software may be the only symptom.

Last update 21 November 2013

 

TOP