Categories: Malware

About “Win32/VB.NSP” infection

The Win32/VB.NSP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/VB.NSP virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
Installs a browser addon or extension
The executable is compressed using UPX
Sniffs keystrokes
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/VB.NSP?


File Info:
crc32: 960E993Fmd5: 76f45ab82522d27c7ed72fda7ee119b1name: 76F45AB82522D27C7ED72FDA7EE119B1.mlwsha1: 142d52cd203b715310e9cf627eed065f23795ae2sha256: 4e3e35a89f8105c2746d77801c92fb12d121e17714a3ea2c41faa1b14f40bc11sha512: c01536b1423e6deb3d1d568a845439a6553cc3a3de068fcef1e2f1bb7e9fdb921b85c04898b26273331e99a1184aee819028e90feb0546c4895688d9b6c7923dssdeep: 3072:AytrlBREwZN8OcIaR3qFe0jV75moGEazI0:AyI+NWB45mTf9type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
Translation: 0x0409 0x04b0ProductVersion: 1.00InternalName: pikachuFileVersion: 1.00OriginalFilename: pikachu.exeProductName: Project1

Win32/VB.NSP also known as:

Bkav	W32.GenericAutorunnerGTC.Worm
Lionic	Trojan.Win32.Generic.l08m
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop2.63822
ClamAV	Legacy.Trojan.Agent-1388589
ALYac	Trojan.Generic.7814978
Cylance	Unsafe
Zillya	Worm.VB.Win32.1215
Sangfor	Malware
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan ( 005640b91 )
K7AntiVirus	Trojan ( 005640b91 )
TrendMicro	WORM_VB.SMLF
Baidu	Win32.Worm.VB.rw
Cyren	W32/Worm.ZIHN-5263
Symantec	Trojan Horse
ESET-NOD32	Win32/VB.NSP
APEX	Malicious
TotalDefense	Win32/Veebuu.LI
Avast	Win32:Sality
Cynet	Malicious (score: 100)
Kaspersky	Worm.Win32.VB.aqj
BitDefender	Trojan.Generic.7814978
NANO-Antivirus	Trojan.Win32.ULPM.csfhee
ViRobot	Worm.Win32.VB.222208
MicroWorld-eScan	Trojan.Generic.7814978
Tencent	Worm.Win32.Autorun.d
Ad-Aware	Trojan.Generic.7814978
Sophos	Mal/VB-F
Comodo	Worm.Win32.Autorun.eb0@13re4o
F-Secure	Trojan.TR/Crypt.ULPM.Gen
BitDefenderTheta	AI:Packer.14C640F11C
VIPRE	Trojan.Win32.Generic.pak!cobra
Invincea	ML/PE-A + Mal/VB-F
McAfee-GW-Edition	BehavesLike.Win32.Swisyn.cm
FireEye	Generic.mg.76f45ab82522d27c
Emsisoft	Trojan.Generic.7814978 (B)
SentinelOne	DFI – Malicious PE
Jiangmin	Worm/VB.asz
Webroot	W32.Worm.ANTM
Avira	TR/Crypt.ULPM.Gen
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Worm/Win32.VB
Kingsoft	Win32.Virut.ce.57344
Microsoft	TrojanDropper:Win32/Gepys
Arcabit	Trojan.Generic.D773F42
SUPERAntiSpyware	Trojan.Agent/Gen-Pikachu
ZoneAlarm	Worm.Win32.VB.aqj
GData	Trojan.Generic.7814978
AhnLab-V3	HEUR/Fakon.mwf.X1381
Acronis	suspicious
McAfee	W32/Worm-FEL!76F45AB82522
MAX	malware (ai score=100)
VBA32	Trojan.VBS.01911
Malwarebytes	Trojan.Agent
Panda	Adware/AccesMembre
TrendMicro-HouseCall	WORM_VB.SMLF
Rising	Worm.VobfusEx!1.99E4 (CLASSIC)
Yandex	Worm.VB!YUKi7rAFDWY
Ikarus	Worm.Win32.VB
Fortinet	W32/Generic.AP.298EDE!tr
AVG	Win32:Sality
Paloalto	generic.ml
Qihoo-360	Win32/Worm.b65