Categories: Worm

Dropped:Win32.Worm.VB.NRV removal instruction

The Dropped:Win32.Worm.VB.NRV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Dropped:Win32.Worm.VB.NRV virus can do?

Behavioural detection: Executable code extraction – unpacking
Creates RWX memory
Dynamic (imported) function loading detected
Authenticode signature is invalid
Installs itself for autorun at Windows startup
Anomalous binary characteristics

How to determine Dropped:Win32.Worm.VB.NRV?


File Info:
name: 8FB6BBB710B47B041C5A.mlwpath: /opt/CAPEv2/storage/binaries/6acd5c79bdbc53e0f6d2b15cb8e8249413720dbc049c33ded020ba000312f07bcrc32: E15E913Fmd5: 8fb6bbb710b47b041c5af0b554f321cdsha1: 36f8cd8ae2bacbed91cd56be7228e8ce1fd44cd6sha256: 6acd5c79bdbc53e0f6d2b15cb8e8249413720dbc049c33ded020ba000312f07bsha512: e44189e0fe686a8b570230ca36ec4171e8f3c6da45781c41b3b507f9bf47e955fd579235154225690111e42eec4321ee8cf81704a3302b818e16bf7bc4beb35bssdeep: 1536:4xdtOLa4oIqAs6Rj+VbI7YMctrFV3MPpdDXln1:4Xya4oIqlA+SYMcF3cDl1type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T12FA32391A213F00DE028F27D4432924DD9242CF2F911F8BE7A567DF866F51472AEB19Bsha3_384: 5363bcfe4e256741f56880798ea6d56903aa94b59bd540c744481e0314eead055e7e24069b33af469b6ee07fd4e22877ep_bytes: 688c704000e8eeffffff000000000000timestamp: 2006-05-13 16:09:17
Version Info:
Translation: 0x0409 0x04b0ProductName: Microsoft® Windows® Operating SystemFileVersion: 1.01ProductVersion: 1.01InternalName: svchosteeOriginalFilename: svchostee.exe

Dropped:Win32.Worm.VB.NRV also known as:

tehtris	Generic.Malware
MicroWorld-eScan	Dropped:Win32.Worm.VB.NRV
CAT-QuickHeal	Worm.Flewon.S349523
ALYac	Dropped:Win32.Worm.VB.NRV
Cylance	Unsafe
Sangfor	VISUAL BASIC4
K7AntiVirus	P2PWorm ( 000238ee1 )
Alibaba	Trojan:Win32/Starter.ali2000005
K7GW	P2PWorm ( 000238ee1 )
Cybereason	malicious.710b47
Baidu	Win32.Worm.VB.ji
VirIT	I-WORM.VB.G
Cyren	W32/Worm.DCNX-7521
Elastic	malicious (high confidence)
ESET-NOD32	Win32/VB.NGN
APEX	Malicious
ClamAV	Win.Worm.Liamo-1
Kaspersky	Email-Worm.Win32.VB.cb
BitDefender	Dropped:Win32.Worm.VB.NRV
NANO-Antivirus	Trojan.Win32.VB.fnxibm
SUPERAntiSpyware	Trojan.Agent/Gen-Falint
Avast	Win32:VB-AEC [Wrm]
Tencent	Malware.Win32.Gencirc.10cebc07
Ad-Aware	Dropped:Win32.Worm.VB.NRV
Emsisoft	Dropped:Win32.Worm.VB.NRV (B)
Comodo	Worm.Win32.VB.NGN@439p
F-Secure	Trojan.TR/Spy.Vwealer.KZ.33
DrWeb	Trojan.PWS.Asterie
Zillya	Worm.VB.Win32.227
TrendMicro	WORM_VB.DHQ
McAfee-GW-Edition	BehavesLike.Win32.PWSZbot.nm
FireEye	Generic.mg.8fb6bbb710b47b04
Sophos	ML/PE-A + Troj/VB-CVM
SentinelOne	Static AI – Malicious PE
GData	Dropped:Win32.Worm.VB.NRV
Jiangmin	TrojanClicker.Qihai.aq
Webroot	W32.Worm.Brontok
Avira	TR/Spy.Vwealer.KZ.33
Arcabit	Win32.Worm.VB.NRV
ViRobot	I-Worm.Win32.VB.94208.E
ZoneAlarm	Email-Worm.Win32.VB.cb
Microsoft	TrojanSpy:Win32/Vwealer
Cynet	Malicious (score: 99)
AhnLab-V3	HEUR/Fakon.mwf.X1381
McAfee	Generic VB.b
MAX	malware (ai score=88)
VBA32	Trojan.VBS.0768
Malwarebytes	Worm.Agent
TrendMicro-HouseCall	WORM_VB.DHQ
Rising	Worm.VBInjectEx!1.99E6 (CLASSIC)
Yandex	Trojan.GenAsa!Atu2opUBTNw
Ikarus	Email-Worm.Win32.VB.cb
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/VB.48EB!worm
BitDefenderTheta	AI:Packer.392069FC20
AVG	Win32:VB-AEC [Wrm]
Panda	W32/MadCoffee.A.worm
CrowdStrike	win/malicious_confidence_100% (W)