Email-Worm.Win32.VB.aaf removal

The Email-Worm.Win32.VB.aaf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Email-Worm.Win32.VB.aaf virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• Authenticode signature is invalid
• Behavioural detection: Injection (inter-process)
• Attempts to disable Windows Auto Updates
• Anomalous binary characteristics
• Attempts to modify Explorer settings to prevent hidden files from being displayed

How to determine Email-Worm.Win32.VB.aaf?

File Info:
name: 443BA63063252A03090E.mlw
path: /opt/CAPEv2/storage/binaries/3420b3cefade246a6b49a39056eecbd9f9f1a1a9cb7d2afea23f3596f5ebe53d
crc32: 6CF8A68C
md5: 443ba63063252a03090ecab6c1b6cf1e
sha1: b167905d1d98f5d7f4ef2f3f705dbd841870953c
sha256: 3420b3cefade246a6b49a39056eecbd9f9f1a1a9cb7d2afea23f3596f5ebe53d
sha512: 8debf70671733fdf76710853650e6e8bebc3a2f68243535541017bf16508970d8418f4eff62ab73284a4c4be4285410904cf660b135656e7613b69b7416deee1
ssdeep: 3072:Cm38bUQSxNjJhU8hPsOkGJeJ7JwJHJ6JkBTriGXfXkGN3tqZ4xoRg4Sx+TidczfF:LUUBlhhFop2pYOF0yIdgFGb
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11644E8733FA11649F46C487459F286F523E7A80F8A47404B76E022E96EFBE361D246D3
sha3_384: 140911918afba8d17cf72dd05e751afd20d3f498887be085405afc42736a7ce6c142506e79b29826346ea61ba9eba1b1
ep_bytes: 68ec124000e8eeffffff000048000000
timestamp: 2012-05-08 20:39:20

Version Info:
Translation: 0x0409 0x04b0
ProductName: slfrzjpojz
FileVersion: 7.08.0002
ProductVersion: 7.08.0002
InternalName: hvxzkfdgngdx
OriginalFilename: hvxzkfdgngdx.exe

Email-Worm.Win32.VB.aaf also known as:

How to remove Email-Worm.Win32.VB.aaf?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.