What is “Worm.Win32.VBNA.algn”?

The Worm.Win32.VBNA.algn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Worm.Win32.VBNA.algn virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• Authenticode signature is invalid
• Behavioural detection: Injection (inter-process)
• CAPE detected the embedded win api malware family
• Anomalous binary characteristics
• Attempts to modify Explorer settings to prevent hidden files from being displayed
• Yara detections observed in process dumps, payloads or dropped files

How to determine Worm.Win32.VBNA.algn?

File Info:
name: 2AAA1B38D7ECD035EDFE.mlw
path: /opt/CAPEv2/storage/binaries/704349e01b91da7ca2ec581d511c5628cac2408a0be68f99ebd5e890f3f1e7de
crc32: A092EB5C
md5: 2aaa1b38d7ecd035edfebcd14a148770
sha1: 7c3018fb39511579b6f163f80103ed83190d8a5e
sha256: 704349e01b91da7ca2ec581d511c5628cac2408a0be68f99ebd5e890f3f1e7de
sha512: 1ce2fab25794c4b685b41048d5eb0618951d90ccd0fe5db5d4f7d365f2ad2d7caf835f86e8336aa847425ebe9d94afd796f265832ce3c26740b42f713245f24e
ssdeep: 1536:PmcCrk6PEutHwHiHoHV/NBbgzrqNldFCnDNlN1t7gS:+cCr7c/NBbgzrqNldFCnDNlN13
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T179731F7F72852C0AC52B3930377583B20177A4942E4F15CB673262EAAE69F80D865F77
sha3_384: 4f16852e3511b68dacb347465cfe4d0341982f7b9bb380ad0a757145446f597034a9f215fb4d55ebda763bd5013ab5c2
ep_bytes: 689c124000e8eeffffff000040000000
timestamp: 2010-07-15 06:22:09

Version Info:
Translation: 0x0409 0x04b0
ProductName: a2
FileVersion: 9.20
ProductVersion: 9.20
InternalName: zziIDdhn
OriginalFilename: zziIDdhn.exe

Worm.Win32.VBNA.algn also known as:

How to remove Worm.Win32.VBNA.algn?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.