Trojan

Should I remove “VB:Trojan.Agent.CNMV”?

Malware Removal

The VB:Trojan.Agent.CNMV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What VB:Trojan.Agent.CNMV virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Harvests cookies for information gathering

How to determine VB:Trojan.Agent.CNMV?



File Info:

name: 8FD3DFCDC365DAA9D8BD.mlw
path: /opt/CAPEv2/storage/binaries/767a4c54d579488e54e2685fa1215261f3f298c83f11714006150da745d88ddf
crc32: 99B62ADB
md5: 8fd3dfcdc365daa9d8bd33ec9e4011c1
sha1: 319a2739ba17ff3fab4a3f77d7dce40c16aff68e
sha256: 767a4c54d579488e54e2685fa1215261f3f298c83f11714006150da745d88ddf
sha512: 04a734f68b1b3e1348fbb477111bcccec55644bf1644805d6b1a8e203c4ce8061496b4069428ccace4e6b0098bb75dbbe2a4c0b1880cb5be043b42386001ce6f
ssdeep: 6144:SCGaECnpAoDO1A8dg3iTPJLMfgQZX+tJs0dxb:DGHCnaomAEg3uPdkgOX+tZdxb
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C364CF02F9C1D9B2C5621C3357699B21B93CBD201F66CEEB67D42A5EDA211C0DB317A2
sha3_384: 68ae230282efa4bb5a5c609fdfec08ec74b7ae59f0acbb4e1a7949879477763b79911e33950d7ace5ed7b43a97c77c34
ep_bytes: e866050000e978feffffcccccccccccc
timestamp: 2022-01-24 07:31:18


Version Info:

0: [No Data]

VB:Trojan.Agent.CNMV also known as:

BkavW32.AIDetect.malware2
MicroWorld-eScanVB:Trojan.Agent.CNMV
FireEyeVB:Trojan.Agent.CNMV
CAT-QuickHealVBS/Shutdown.AE
McAfeeArtemis!8FD3DFCDC365
VIPREVB:Trojan.Agent.CNMV
K7AntiVirusTrojan ( 00527df21 )
BitDefenderVB:Trojan.Agent.CNMV
K7GWTrojan ( 00527df21 )
Cybereasonmalicious.dc365d
ArcabitVB:Trojan.Agent.CNMV
CyrenVBS/Shutdown.E
SymantecTrojan.Gen.MBT
ESET-NOD32VBS/Shutdown.NAH
BaiduVBS.Trojan.BadJoke.g
APEXMalicious
KasperskyTrojan.VBS.Shutdown.ap
NANO-AntivirusRiskware.Script.Shutdown.fjagie
CynetMalicious (score: 100)
RisingJoke.Win32.VBS.Shutdown.b (CLASSIC)
SophosVBS/shtdwn-A
ComodoTrojWare.VBS.Shutdown.A@34nx6a
DrWebVBS.Reboot.47
TrendMicroVBS_SHUTDWN.SMD
McAfee-GW-EditionBehavesLike.Win32.BadFile.fh
Trapminesuspicious.low.ml.score
EmsisoftVB:Trojan.Agent.CNMV (B)
AviraVBS/Shutdown.VPAS
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataScript.Trojan.Shutdown.C
GoogleDetected
VBA32Trojan.VBS.Shutdown.ae
ALYacVB:Trojan.Agent.CNMV
MAXmalware (ai score=82)
TrendMicro-HouseCallVBS_SHUTDWN.SMD
IkarusTrojan.VBS.Shutdown
MaxSecureTrojan.Malware.300983.susgen
FortinetVBS/Shutdown.NAH!tr
AVGVBS:Reset-A [Trj]
AvastVBS:Reset-A [Trj]
CrowdStrikewin/malicious_confidence_60% (W)

How to remove VB:Trojan.Agent.CNMV?

VB:Trojan.Agent.CNMV removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment