Categories: Worm

Should I remove “VBS.Heur.Worm.Dunihi.2.F8AC86B2.Gen”?

The VBS.Heur.Worm.Dunihi.2.F8AC86B2.Gen is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VBS.Heur.Worm.Dunihi.2.F8AC86B2.Gen virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Presents an Authenticode digital signature
Creates RWX memory
Dynamic (imported) function loading detected
Reads data out of its own binary image
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Harvests cookies for information gathering

How to determine VBS.Heur.Worm.Dunihi.2.F8AC86B2.Gen?


File Info:
name: 03E5CB77E57755A66233.mlwpath: /opt/CAPEv2/storage/binaries/1d55a4a42d335aa82e1ed53178470b1220ebcfab3da5cf4ab8f36fdff67fd528crc32: 491DE58Cmd5: 03e5cb77e57755a662338f69e0b2f5cesha1: 061725a6ccfc83fdaab5b82da77da7adff308b32sha256: 1d55a4a42d335aa82e1ed53178470b1220ebcfab3da5cf4ab8f36fdff67fd528sha512: 1350938c9973750cc971849d6ea0dc7c38cb25c96f8b87a351f3b286ffeaa56581b671bcfe3c19077d0a6f531ec8c858043a8e0c537c91a4d5231c32cedf4129ssdeep: 49152:aGkLqlPWufY3dmCAITM4nvvYRc7M6JpzYgaP:aGEqljfAmCfTM4vvvOPtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T12BD522935B808071CD424E3081CAE6629DF6FDF4AF91658B67A065EA3E72BE11714E0Fsha3_384: 6f3be72d7f725412581bffaddcb6a99d9a9dfc633559b98f337ce72a3862f62cca7b535891a473a1f83f6e360dc2f7efep_bytes: e82d640000e978feffff558bec83ec04timestamp: 2014-12-02 10:07:35
Version Info:
0: [No Data]

VBS.Heur.Worm.Dunihi.2.F8AC86B2.Gen also known as:

Lionic	Trojan.Multi.Generic.4!c
Elastic	malicious (moderate confidence)
MicroWorld-eScan	VBS.Heur.Worm.Dunihi.2.F8AC86B2.Gen
FireEye	VBS.Heur.Worm.Dunihi.2.F8AC86B2.Gen
McAfee	Artemis!03E5CB77E577
Cylance	Unsafe
VIPRE	VBS.Heur.Worm.Dunihi.2.F8AC86B2.Gen
K7AntiVirus	Trojan ( 0049a04d1 )
Alibaba	Trojan:VBS/Kryptik.2bed7341
K7GW	Trojan ( 0049a04d1 )
Cybereason	malicious.7e5775
Symantec	Trojan.Gen.2
ESET-NOD32	VBS/Kryptik.AP
Baidu	VBS.Worm.Agent.rd
TrendMicro-HouseCall	TROJ_GEN.R03BC0PFU22
ClamAV	Win.Trojan.Graybird-7491042-0
Kaspersky	Trojan.VBS.Agent.tg
BitDefender	VBS.Heur.Worm.Dunihi.2.F8AC86B2.Gen
NANO-Antivirus	Trojan.Script.Agent.dmmmng
Avast	VBS:Downloader-PI [Trj]
Tencent	Win32.Script.Agent.Glp
Emsisoft	VBS.Heur.Worm.Dunihi.2.F8AC86B2.Gen (B)
Comodo	Malware@#3p5tvkndfnddm
TrendMicro	TROJ_GEN.R03BC0PFU22
McAfee-GW-Edition	JS/Downloader.gen.ec
Sophos	Mal/Generic-S
APEX	Malicious
GData	VBS.Heur.Worm.Dunihi.2.F8AC86B2.Gen
Jiangmin	Backdoor/Hupigon.beeg
Kingsoft	Win32.Heur.KVM007.a.(kcloud)
ViRobot	Trojan.Win32.Z.Agent.2763017
ZoneAlarm	Trojan.VBS.Agent.tg
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
ALYac	VBS.Heur.Worm.Dunihi.2.F8AC86B2.Gen
Malwarebytes	Zegost.Backdoor.Stealer.DDS
Ikarus	Backdoor.Win32.Zegost
Fortinet	WM/Moat.33F95FF6!tr
AVG	VBS:Downloader-PI [Trj]
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_70% (W)