Categories: Trojan

Should I remove “VB:Trojan.Agent.CNMV”?

The VB:Trojan.Agent.CNMV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VB:Trojan.Agent.CNMV virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Harvests cookies for information gathering

How to determine VB:Trojan.Agent.CNMV?


File Info:
name: 8FD3DFCDC365DAA9D8BD.mlwpath: /opt/CAPEv2/storage/binaries/767a4c54d579488e54e2685fa1215261f3f298c83f11714006150da745d88ddfcrc32: 99B62ADBmd5: 8fd3dfcdc365daa9d8bd33ec9e4011c1sha1: 319a2739ba17ff3fab4a3f77d7dce40c16aff68esha256: 767a4c54d579488e54e2685fa1215261f3f298c83f11714006150da745d88ddfsha512: 04a734f68b1b3e1348fbb477111bcccec55644bf1644805d6b1a8e203c4ce8061496b4069428ccace4e6b0098bb75dbbe2a4c0b1880cb5be043b42386001ce6fssdeep: 6144:SCGaECnpAoDO1A8dg3iTPJLMfgQZX+tJs0dxb:DGHCnaomAEg3uPdkgOX+tZdxbtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1C364CF02F9C1D9B2C5621C3357699B21B93CBD201F66CEEB67D42A5EDA211C0DB317A2sha3_384: 68ae230282efa4bb5a5c609fdfec08ec74b7ae59f0acbb4e1a7949879477763b79911e33950d7ace5ed7b43a97c77c34ep_bytes: e866050000e978feffffcccccccccccctimestamp: 2022-01-24 07:31:18
Version Info:
0: [No Data]

VB:Trojan.Agent.CNMV also known as:

Bkav	W32.AIDetect.malware2
MicroWorld-eScan	VB:Trojan.Agent.CNMV
FireEye	VB:Trojan.Agent.CNMV
CAT-QuickHeal	VBS/Shutdown.AE
McAfee	Artemis!8FD3DFCDC365
VIPRE	VB:Trojan.Agent.CNMV
K7AntiVirus	Trojan ( 00527df21 )
BitDefender	VB:Trojan.Agent.CNMV
K7GW	Trojan ( 00527df21 )
Cybereason	malicious.dc365d
Arcabit	VB:Trojan.Agent.CNMV
Cyren	VBS/Shutdown.E
Symantec	Trojan.Gen.MBT
ESET-NOD32	VBS/Shutdown.NAH
Baidu	VBS.Trojan.BadJoke.g
APEX	Malicious
Kaspersky	Trojan.VBS.Shutdown.ap
NANO-Antivirus	Riskware.Script.Shutdown.fjagie
Cynet	Malicious (score: 100)
Rising	Joke.Win32.VBS.Shutdown.b (CLASSIC)
Sophos	VBS/shtdwn-A
Comodo	TrojWare.VBS.Shutdown.A@34nx6a
DrWeb	VBS.Reboot.47
TrendMicro	VBS_SHUTDWN.SMD
McAfee-GW-Edition	BehavesLike.Win32.BadFile.fh
Trapmine	suspicious.low.ml.score
Emsisoft	VB:Trojan.Agent.CNMV (B)
Avira	VBS/Shutdown.VPAS
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Script.Trojan.Shutdown.C
Google	Detected
VBA32	Trojan.VBS.Shutdown.ae
ALYac	VB:Trojan.Agent.CNMV
MAX	malware (ai score=82)
TrendMicro-HouseCall	VBS_SHUTDWN.SMD
Ikarus	Trojan.VBS.Shutdown
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	VBS/Shutdown.NAH!tr
AVG	VBS:Reset-A [Trj]
Avast	VBS:Reset-A [Trj]
CrowdStrike	win/malicious_confidence_60% (W)