The file VREMYAMOE.VBS is identified as a virus dropper.
The dropper VREMYAMOE.VBS is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
The file VREMYAMOE.VBS loads into the computer memory and tries to connect to the dangerous web site.
Usually the VREMYAMOE.VBS dropper does not infect the files on the computer and does not replicate itself on other computers.
Kill the VREMYAMOE.VBS process and delete the file VREMYAMOE.VBS.
Malware Analysis of VREMYAMOE.VBS
Full path on a computer: %Program Files%\Compana\OldProa\vremyamoe.vbs
Detected by UnHackMe:
VREMYAMOE.VBS
Default location: %Program Files%\Compana\OldProa\vremyamoe.vbs
Removal Results: Success
Number of reboot: 1
VREMYAMOE.VBS is known as:
Trojan.Bicololo
VREMYAMOE.VBS hash:
- MD5: 49d863a9520a8139805fb471cb3bd1d1
How to quickly detect VREMYAMOE.VBS presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\OldProa 1.07\UninstallString: “%Program Files%\Compana\OldProa\Uninstall.exe”
Folders:- %Program Files%\Compana
- %Program Files%\Compana\OldProa
Files:- %Program Files%\Compana\OldProa\batumisuhumi.bat
- %Program Files%\Compana\OldProa\egonestaneth.txt
- %Program Files%\Compana\OldProa\hiltommilton.bat
- %Program Files%\Compana\OldProa\Uninstall.exe
- %Program Files%\Compana\OldProa\Uninstall.ini
- %Program Files%\Compana\OldProa\usadittsvetami.txt
- %Program Files%\Compana\OldProa\vduseduj.vbs
- %Program Files%\Compana\OldProa\vremyamoe.vbs