We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Trojan:VBS/Crypter.B
Aliases: VBS/Kryptik.J trojan (ESET) VBS/Safa-A (Sophos) VBS/Autorun.worm.aapd (McAfee) VBS.Dunihi (Symantec) VBS_DUNIHI.SM (Trend Micro) Trojan.UKHL-4 (Command) VBS.Decode (Ikarus) VBS_JENXCUS.AP (Trend Micro)
Summary
Windows Defender detects and removes this threat.
This threat is a malicious file that uses encryption to hide its true purpose.
We have seen variants of Worm:VBS/Jenxcus using this type of encryption.
This threat can arrive on your PC as a spam email attachment. It can also be installed by other malware.
The following Microsoft security software detects and removes this threat:
- Microsoft Security Essentials or, for Windows 8, Windows Defender
- Microsoft Safety Scanner
Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC.