IM-Worm.Win32.VB.poa information

The IM-Worm.Win32.VB.poa is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IM-Worm.Win32.VB.poa virus can do?

Executable code extraction
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine IM-Worm.Win32.VB.poa?


File Info:
crc32: A3DB4B35
md5: 0483284a11b9c59d31b3be816f5f236e
name: 0483284A11B9C59D31B3BE816F5F236E.mlw
sha1: ef3427651db0098633dbeab6a91a8b7086ec7261
sha256: 852f4106c39513899a21a8798ba7a7e9f0ee8ddd916dc65664664972ab7b6891
sha512: 5c53131b382a9b149d6d00094f7aaeac7d8cd385868c441d35192ceec9135da1ceaf33ed0d871e96e4d9c33edf58f7bc12c2911b1b349b9f2e705d81ccfac048
ssdeep: 768:2Xef+IWiLnR+l1gw30kGUBTK2iBghrmuaVicJ+Oei+Jg3SlUqRe30ql:9f+IRclSw3PGmTIuUkkxB2VUP3jl
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: Who's Online
FileVersion: 1.00
CompanyName: Underground Coding Inc.
ProductName: prjLoadFromFile
ProductVersion: 1.00
OriginalFilename: Who's Online.exe

IM-Worm.Win32.VB.poa also known as:

DrWeb	BACKDOOR.Trojan
Cynet	Malicious (score: 100)
ALYac	Gen:Trojan.Heur2.VP2.dm0@audNO9ai
Sangfor	Worm.Win32.VB.buxin
Cybereason	malicious.a11b9c
Symantec	Trojan.Gen.MBT
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	IM-Worm.Win32.VB.poa
BitDefender	Gen:Trojan.Heur2.VP2.dm0@audNO9ai
NANO-Antivirus	Trojan.Win32.VB.cyjybw
MicroWorld-eScan	Gen:Trojan.Heur2.VP2.dm0@audNO9ai
Tencent	Win32.Worm-im.Vb.Eoh
Ad-Aware	Gen:Trojan.Heur2.VP2.dm0@audNO9ai
Sophos	Mal/Generic-S
Comodo	Malware@#31cuyc2rxs1hd
BitDefenderTheta	AI:Packer.83ACFD2E21
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Fareit.kt
FireEye	Generic.mg.0483284a11b9c59d
Emsisoft	Gen:Trojan.Heur2.VP2.dm0@audNO9ai (B)
SentinelOne	Static AI – Suspicious PE
Antiy-AVL	Trojan/Generic.ASMalwS.392BD8
Microsoft	Trojan:Win32/Wacatac.A!ml
Arcabit	Trojan.Heur2.VP2.E5B97E
GData	Gen:Trojan.Heur2.VP2.dm0@audNO9ai
McAfee	Artemis!0483284A11B9
MAX	malware (ai score=84)
VBA32	suspected of Trojan-AOL.VB.2
Panda	Generic Malware
Fortinet	W32/VB.POA!worm.im
AVG	Win32:Malware-gen

How to remove IM-Worm.Win32.VB.poa?

IM-Worm.Win32.VB.poa removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X