UDS:Worm.Win32.WBVB malicious file

The UDS:Worm.Win32.WBVB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What UDS:Worm.Win32.WBVB virus can do?

Executable code extraction
Anomalous binary characteristics

How to determine UDS:Worm.Win32.WBVB?


File Info:
crc32: 9382F6E9
md5: ded56210e4491797f704b4b0525238d8
name: DED56210E4491797F704B4B0525238D8.mlw
sha1: 7a1ca12b56aee84bab41abb6cd4b6eb50a64ef21
sha256: 422287b67dd187c3fae4472cdf654ef69354ab78ac094dee6711874c9e59f1f4
sha512: a5e2399e1b18ac416036658db449c2c77e30a31242d2c827870022989ff5b5cff6cf183b5e04b1a20be72ad615782b8f43975cd42c27d1b961745ee70e6fef3b
ssdeep: 1536:FGouBWGIDtxQCg53OuHKuSx2ig9TWb1yihGo:FGZBWG+tebq3x2nCb1yihG
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: nyanlgg
FileVersion: 3.00
CompanyName: Salty
Comments: Salty
ProductName: Salty
ProductVersion: 3.00
FileDescription: Salty
OriginalFilename: nyanlgg.exe

UDS:Worm.Win32.WBVB also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (W)
Cybereason	malicious.0e4491
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	UDS:Worm.Win32.WBVB
BitDefender	Trojan.GenericKD.36644494
MicroWorld-eScan	Trojan.GenericKD.36644494
Ad-Aware	Trojan.GenericKD.36644494
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZevbaF.34670.hm0@aSrcDkci
McAfee-GW-Edition	BehavesLike.Win32.VBObfus.cm
FireEye	Trojan.GenericKD.36644494
Emsisoft	Trojan.GenericKD.36644494 (B)
SentinelOne	Static AI – Suspicious PE
Webroot	W32.Malware.Gen
eGambit	Unsafe.AI_Score_99%
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Guloader.VAM!MTB
AegisLab	Trojan.Win32.Generic.4!c
GData	Trojan.GenericKD.36644494
McAfee	GenericRXAA-AA!DED56210E449
MAX	malware (ai score=84)
Panda	Trj/Agent.PM
TrendMicro-HouseCall	TROJ_FRS.VSNW06D21
Rising	Trojan.Guloader!8.11961 (CLOUD)
Fortinet	Malicious_Behavior.SB
AVG	Win32:Malware-gen

How to remove UDS:Worm.Win32.WBVB?

UDS:Worm.Win32.WBVB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X