Worm

Worm.MSIL.VBNA removal

Malware Removal

The Worm.MSIL.VBNA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm.MSIL.VBNA virus can do?

  • Dynamic (imported) function loading detected
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous .NET characteristics

How to determine Worm.MSIL.VBNA?


File Info:

name: F762849F3CC2BFEB8BCA.mlw
path: /opt/CAPEv2/storage/binaries/894070d310f258fda4ebb3774acfd257109c15396e833580d033e2717136c983
crc32: C07F9927
md5: f762849f3cc2bfeb8bcab35306ebde0e
sha1: ae37a3bbe778e96323fcaa4ff1fe1b29da80e307
sha256: 894070d310f258fda4ebb3774acfd257109c15396e833580d033e2717136c983
sha512: 2f448d9f0ed24f4a976920dbc49febfef05d04a57689fab8826a652e8026a9e9f4a77db97f35009737cf46a5d7b45ab594590c34c0be3b0c73827e1e02abace6
ssdeep: 98304:2mJ1XfQNXYlmlVRquJChU4NPYaJObrbP3Vown9sOgjvKNKota0BpHseB0XW2Vdt+:2c1XfgYglOSIdRaPPXw83L0XftdTIZ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1556633A3220073C1C09C163542BF74262561FEC6556BC768BD5EBACD3FB26B2DD66B08
sha3_384: 6169bc9606113816722e90a33479fafe4ded31c3278060b7f538b99270fc4303a60257f167fe159b85736f4118513fba
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-04-24 22:20:13

Version Info:

Translation: 0x0000 0x04b0
FileDescription:
FileVersion: 0.0.0.0
InternalName: xBXSWfYcJC.exe
LegalCopyright:
OriginalFilename: xBXSWfYcJC.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Worm.MSIL.VBNA also known as:

MicroWorld-eScanGen:Heur.MSIL.Bladabindi.1
FireEyeGeneric.mg.f762849f3cc2bfeb
SangforSuspicious.Win32.Save.a
BitDefenderGen:Heur.MSIL.Bladabindi.1
CrowdStrikewin/malicious_confidence_90% (W)
BitDefenderThetaGen:NN.ZemsilF.34638.@p0@a8vUH!g
CyrenW32/MSIL_Kryptik.GVV.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
TrendMicro-HouseCallTROJ_GEN.R014C0WDS22
KasperskyHEUR:Worm.MSIL.VBNA.gen
RisingTrojan.Generic/MSIL@AI.90 (RDM.MSIL:oz1BkSIssuFkZkVpn0gzMQ)
Ad-AwareGen:Heur.MSIL.Bladabindi.1
SophosGeneric ML PUA (PUA)
TrendMicroTROJ_GEN.R014C0WDS22
McAfee-GW-EditionArtemis!Trojan
EmsisoftGen:Heur.MSIL.Bladabindi.1 (B)
APEXMalicious
GDataGen:Heur.MSIL.Bladabindi.1
AviraTR/Dropper.MSIL.Gen
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
Acronissuspicious
McAfeeArtemis!F762849F3CC2
MAXmalware (ai score=81)
IkarusGen.MSIL.Bladabindi
YandexTrojan.DR.MSIL!IGg75Qd6yAY
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetPossibleThreat
AVGWin32:RATX-gen [Trj]
Cybereasonmalicious.f3cc2b
AvastWin32:RATX-gen [Trj]

How to remove Worm.MSIL.VBNA?

Worm.MSIL.VBNA removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment