Malware

Win32/VB.NMD (file analysis)

Malware Removal

The Win32/VB.NMD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Win32/VB.NMD virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality
  • Uses suspicious command line tools or Windows utilities

How to determine Win32/VB.NMD?



File Info:

name: 58BE6AA70CDD4444BD3A.mlw
path: /opt/CAPEv2/storage/binaries/daf8681508e399bc21eb8afb443b88de74c2d0c364c192ecd092f59ef229d93d
crc32: CB7FDA2B
md5: 58be6aa70cdd4444bd3a5ca1e41ddb48
sha1: 02cc39f4184443c494770b6e6d863b0bc4a88550
sha256: daf8681508e399bc21eb8afb443b88de74c2d0c364c192ecd092f59ef229d93d
sha512: 048b8ef5eee7a4304e260e3cc329e5526d1f291fdb3054562a42d15d3dac030b43f7bc9388fdddaf5195296ecf9455a80886484eb4d384603213113b40b6f9a0
ssdeep: 3072:OE9j8b3ZXgKC1hX//iASOXRJzDOD26j/3Dc8R:OEebiKuX//iZOXRJ3OD26jLR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T153C30927FA94701ED553C9F1283A56693C0A7D390BE0AD8776C16E452A72683F8F231F
sha3_384: 7d541610627c25b68fea67bd5a4327393b8d9e15bb70876a6366ba15c62c2c0e8826af44e8f6f755020d8aa40d7544ad
ep_bytes: 687c344000e8f0ffffff000000000000
timestamp: 2007-06-30 00:14:28


Version Info:

CompanyName: Microsoft Corporation
FileDescription: Windows NT Session Manager
FileVersion: 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
InternalName: smss.exe
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: smss.exe
ProductName: Microsoft® Windows® Operating System
ProductVersion: 5.1.2600.2180
Translation: 0x0409 0x04b0

Win32/VB.NMD also known as:

BkavW32.AIDetectMalware
DrWebTrojan.MulDrop3.21106
MicroWorld-eScanTrojan.GenericKD.49418307
CAT-QuickHealBackdoor.AgentVMF.S28819259
McAfeeGenericRXUW-JQ!58BE6AA70CDD
MalwarebytesGeneric.Malware.AI.DDS
VIPRETrojan.GenericKD.49418307
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 0059c7f01 )
K7GWTrojan ( 0059c7f01 )
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderThetaGen:NN.ZevbaF.36250.hm1@aid74Lhi
CyrenW32/VB.XI.gen!Eldorado
SymantecBackdoor.Trojan
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/VB.NMD
APEXMalicious
ClamAVWin.Trojan.Backdoorx-9955014-0
KasperskyBackdoor.Win32.VB.bnv
BitDefenderTrojan.GenericKD.49418307
NANO-AntivirusTrojan.Win32.VB.jttyju
AvastWin32:BackdoorX-gen [Trj]
TencentTrojan.Win32.Backdoor.zk
EmsisoftTrojan.GenericKD.49418307 (B)
F-SecureTrojan.TR/Dropper.Gen
ZillyaBackdoor.VB.Win32.10400
McAfee-GW-EditionBehavesLike.Win32.Generic.cm
Trapminemalicious.moderate.ml.score
FireEyeGeneric.mg.58be6aa70cdd4444
SophosTroj/VB-LEB
SentinelOneStatic AI – Suspicious PE
GDataTrojan.GenericKD.49418307
JiangminBackdoor.VB.co
GoogleDetected
AviraTR/Dropper.Gen
MAXmalware (ai score=83)
Antiy-AVLTrojan[Backdoor]/Win32.VB
ArcabitTrojan.Generic.D2F21043
ViRobotBackdoor.Win32.A.VB.118784.B
ZoneAlarmBackdoor.Win32.VB.bnv
MicrosoftTrojan:Win32/Comame!gmb
CynetMalicious (score: 100)
AhnLab-V3Backdoor/Win.VB.R523913
VBA32Backdoor.VB
ALYacTrojan.GenericKD.49418307
Cylanceunsafe
PandaTrj/Genetic.gen
RisingBackdoor.VB!8.32C (TFE:3:w0Ck1d6OW1V)
YandexTrojan.GenAsa!GPjPD8Wqigw
IkarusBackdoor.Win32.VB
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/VB.NMD!tr
AVGWin32:BackdoorX-gen [Trj]
Cybereasonmalicious.70cdd4
DeepInstinctMALICIOUS

How to remove Win32/VB.NMD?

Win32/VB.NMD removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment