Is your computer infected with Mal/VB-CS? This step-by-step guide can help you safely and quickly remove Mal/VB-CS. 

Mal/VB-CS Description

Mal/VB-CS is determined by Tee Support Labs as malicious trojan horse that may represent security risk for the compromised system and its network environment. Mal/VB-CS is able to modify other files by infecting, prepending, or overwriting them them with its own body. Mal/VB-CS is also capble to block security software by modifying firewall settings and by disabling security services, eg. Windows Update, Norton Autoprotect, Kaspersky Anti-virus, etc. To modify the hosts file of the system, Mal/VB-CS can aslo block the access to the security web pages. If there were some type of system executable file modified, which might indicate the presence of a PE-file infector. Remove Mal/VB-CS timely once it is detected on a computer.

Mal/VB-CS has security threat shows in the following aspects

  1. Mal/VB-CS often infect computer without your permission at the background.
  2. Mal/VB-CS allow hacker remotely access to the computer.
  3. Mal/VB-CS can spread via network if the infected drive is shared at the network.
  4. Your antivirus software (Sophos) may alert you to get rid of this infection Mal/VB-CS.

Solutions That Really Do Their Jobs

Soutions 1 : Manually Remove Mal/VB-CS, Mal/VB-CS by Yourself

1)  The associated processes of Mal/VB-CS to be stoped are listed below:

  34byl.exe, o6jv.exe

2)  The associated files of Mal/VB-CS to be deleted are listed below:

  c:\2.txt, %Windir%\Temp\18.tmp
  %AppData%\hwt.exe, %Windir%\Temp\ main.exe
  %AppData%\lubvz.exe, %Windir%\Temp\ fb_spam_ab4.exe
  %AppData%\wedh.exe, %Windir%\Temp\ res_ab4.exe
  %UserProfile%\%UserName%1\winlogon.exe, %System%\nwcwks.dll
  %Windir%\Tasks\fbagent.job, %Windir%\Temp\1.jpg
  %Windir%\Temp\2.jpg, %Windir%\Temp\34byl.exe
  %Windir%\Temp\9.tmp, %Windir%\Temp\9cho4.log
  %Windir%\Temp\A.tmp, %Windir%\Temp\af099kmo.exe
  %Windir%\Temp\B.tmp, %Windir%\Temp\file.exe
  %Windir%\Temp\index.html, %Windir%\Temp\o6jv.exe
  %Windir%\Temp\sx2eww702.exe, %Windir%\Temp\yffy4dwa.exe

3)  The registry entries of Mal/VB-CS that need to be removed are listed as follows (Take Note: Back up the Windows registry before editing it, so that you can quickly restore it later if something goes wrong.):

  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tbsolute
  HKEY_LOCAL_MACHINE\SOFTWARE\facebook
  HKEY_LOCAL_MACHINE\SOFTWARE\twitter
  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_NWCWORKSTATION
  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_NWCWORKSTATION\0000
  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_NWCWORKSTATION\0000\Control
  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NWCWorkstation
  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NWCWorkstation\Parameters
  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NWCWorkstation\Security
  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NWCWorkstation\Enum
  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NWCWORKSTATION
  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NWCWORKSTATION\0000
  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NWCWORKSTATION\0000\Control
  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NWCWorkstation
  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NWCWorkstation\Parameters
  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NWCWorkstation\Security
  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NWCWorkstation\Enum
Tip:You might think the manual removal is not for you. So you must looking for a quicker and easier solution to terminate the nasty Mal/VB-CS, Mal/VB-CS . Spyhunter would be your very first choice to satisfy you.

Solution 2 – Automatically Remove Mal/VB-CS, Mal/VB-CS with the Help of the Powerful Spyhunter

Step 1: click the link to download and install Spyhunter on your computer.

Step 2: click ” Yes, protect my homepage” to protect your browser.

Step 3: Click “Scan Now” to scan your computer to block Mal/VB-CS, Mal/VB-CS

Kindly Reminder
There is no reason for Mal/VB-CS, Mal/VB-CS to stay on your computer and cause additional trouble. Once detected, it should be ended without any delay. Please download and install Spyhunter to finish it!


VN:F [1.9.18_1163]
Rating: 0.0/10 (0 votes cast)

Final Recommendation:

Still having trouble on dealing with tricky virus infections, stubborn errors, unwanted programs or any other headachy computer problems? Then, you definitely need a more specific, accurate and customized solution toward your specific issue in your specific computer system. Tee Support is an award-winning online tech service with over 5-year dedicated experience. Tee Support experts provide sophisticated manual solutions.

Learn More and Sign up for Tee Support Online Service Now!