Wednesday, December 16, 2015

Guide to Get Rid of VBA/TrojanDownloader.Agent.ABY Permanently

Files infected by VBA/TrojanDownloader.Agent.ABY? Need help to remove infections of this malware? This article will help you get rid of it.

Brief Introduction of VBA/TrojanDownloader.Agent.ABY


VBA/TrojanDownloader.Agent.ABY is detected as a Trojan Horse that will compromise your system seriously and cause a lot of computer problems. For example –

It may insert malicious registry key to activate itself at every system start;
It may infect your system files and replicate malicious files on your disk;
It may allow hackers to remotely access your computer system;
It may modify your important files and registry entries;
It may download and install other unwanted or compromised software to your computer;
It may steal your personal information like IP, emails, usernames, passwords, or banking details;
It may exploit your system vulnerability and degrade your system performance;
It may run suspected processes with sufficient memory in the background and slow your PC.

VBA/TrojanDownloader.Agent.ABY often sneaks into your computer via infected software, spam emails, intrusive links, suspicious websites, and peer to peer share files. You should follow the tips below to avoid Trojan Horse in the feature.

Never download and install spam e-mails attachments to your computer.
Never download unknown software from unreliable download websites.
Never use default installation or ‘Express Setup’ to install software to your computer.
Never click links or pop-ups on intrusive or suspected websites.
Install reputable real-time antivirus or anti-malware to secure your computer.

Guide to Remove VBA/TrojanDownloader.Agent.ABY


Guide 1: Manually Remove VBA/TrojanDownloader.Agent.ABY by Yourself

Guide 1: Manually Remove VBA/TrojanDownloader.Agent.ABY by Yourself


Step 1. Restart your computer in Safe mode.

Keep tabbing F8 key before the Windows start-up logo appears until you get to Advanced Options, select Safe Mode, and hit ENTER.


Step 2. End up the trojan processes in Windows Task Manager.

Press Ctrl+Shift+Esc or Ctrl+Alt+Delete to open Windows Task Manager, find malicious processes and click End process.


Step 3. Navigate to Registry Editor and clean up all VBA/TrojanDownloader.Agent.ABY registry entries.

Press Win+ R key at and same time to open Run Commend Box. Open Registry Editor by typing “regedit” in Runbox and clicking OK.


Look through the registry entries and find out all listed harmful items. Right click on them and terminate the related entries.


HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "<random>" = "%AppData%\<random>.exe"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "<random>" = "%AppData%\<random>.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation"=1
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%AppData%\<random>.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe "Debugger"="svchost.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe

Step 4. Show hidden folders and files.

Windows XP

Start button > Control Panel > Appearance and Personalization > Folder Options > Show Hidden Files or Folders


Remove the checkmark from Hide extensions for known file types. And remove the checkmark from Hide protected operating system files (Recommended).

Windows 7 / Vista

Libraries > Folder Options > Tools > Show Hidden Files or Folders



Remove the checkmark from Hide extensions for known file types and Hide protected operating system files (Recommended)

Windows 8 /8.1

Windows Explorer > View > Hidden Items


Delete VBA/TrojanDownloader.Agent.ABY Virus associated files.

%UserProfile%\Application Data\Microsoft\[random].exe
%System Root%\Samples
%User Profile%\Local Settings\Temp
%AppData%\<random>.exe
%CommonAppData%\<random>.exe
C:\Windows\Temp\<random>.exe
%temp%\<random>.exe
C:\Program Files\<random>
C:\ProgramData\[random numbers]\

Step 5. Remove leftover and speed up your PC.

You can download and install RegCure Pro to speed up and optimize your PC. It is packed with the tools you need to boost your PC's speed and performance.

  • Clean away Windows registry errors
  • Eject active viruses, spyware and other malware
  • Stop unneeded processes 
  • Delete startup items
  • Delete privacy files

Click the icon to download RegCure Pro.


Guide 2: Automatically Remove VBA/TrojanDownloader.Agent.ABY with Powerful Removal Tool


SpyHunter is an adaptive real-time spyware detection and removal tool. It  can help you remove VBA/TrojanDownloader.Agent.ABY and all the threats in your PC. It will never bundle with any programs and can get along with existing security programs without any conflicts. Please feel relieved about usage.

Click the download button below to get SpyHunter


After detecting all the threats in your system, you can click on “Fix Threats” to remove them.


Warm Reminder:

SpyHunter is a powerful anti-virus for inexperience computer user. It can help you remove all the detected threats automatically. So all you need to do is install it for immediate and ongoing protection.

No comments:

Post a Comment