Worm.Win32.WBNA.ipi information

The Worm.Win32.WBNA.ipi is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Worm.Win32.WBNA.ipi virus can do?

Unconventionial language used in binary resources: Swahili
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Worm.Win32.WBNA.ipi?


File Info:
name: 9E3E3BC535370E99A5C9.mlw
path: /opt/CAPEv2/storage/binaries/9ee98c4f71728cba1207a4799198873c4d10daf3e5891349e777a12da855e78b
crc32: 190D2B1E
md5: 9e3e3bc535370e99a5c9be9f865fdfa9
sha1: 59a5e0a269f3d1c34dfaf441943588a6baf1666d
sha256: 9ee98c4f71728cba1207a4799198873c4d10daf3e5891349e777a12da855e78b
sha512: 3fa264bff890373ce21221f80b2c4a092bc7b2c2b92cebe9b0464fa0e5973765522ce8195de228d813afe40a3eb9374f738cf8fad1c495ecf6e7e8e94f55d348
ssdeep: 1536:Z7Q3NpqHBIib9li1w185vhAX/IU5E2CSyN9gDYAtJvkLZ7oHm:ZzBfskuvhAXF5pYQtyLsm
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BFD3D67529FCA13FD1B6A1B5D7906BEAB250F5AD36029C4AE14B21055B23F0373A122F
sha3_384: 315ae95bf7bb6e12bae9b4604c14c58c27b73816070ab0e6f44cbf136ed878ecfd8472222334d55e2a7fdaf38c7d85e0
ep_bytes: 68b8154000e8f0ffffff000000000000
timestamp: 2012-08-29 01:07:27

Version Info:
Translation: 0x0409 0x04b0
CompanyName: claironnerai rebelle'es
FileDescription: decouragerais mille'sime's empetrerons
LegalCopyright: approfon sauriser 1990
LegalTrademarks: epelant clayonne
ProductName: grognonner événementielles
FileVersion: 8.03.0007
ProductVersion: 8.03.0007
InternalName: concordé
OriginalFilename: concordé.exe

Worm.Win32.WBNA.ipi also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Panda.786
MicroWorld-eScan	Gen:Heur.Mint.Dreidel.im0@xKmM2ulG
FireEye	Generic.mg.9e3e3bc535370e99
McAfee	GenericATG-FAFN!9E3E3BC53537
Zillya	Worm.WBNA.Win32.183915
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0040df0e1 )
K7GW	Trojan ( 0040df0e1 )
Cybereason	malicious.535370
Cyren	W32/VBcrypt.AP.gen!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/Injector.VZA
Kaspersky	Worm.Win32.WBNA.ipi
BitDefender	Gen:Heur.Mint.Dreidel.im0@xKmM2ulG
Emsisoft	Gen:Heur.Mint.Dreidel.im0@xKmM2ulG (B)
Comodo	TrojWare.Win32.Injector.XFR@4rorse
Baidu	Win32.Trojan.Inject.bh
McAfee-GW-Edition	BehavesLike.Win32.Generic.ch
Sophos	ML/PE-A + Mal/VBInj-Y
SentinelOne	Static AI – Malicious PE
Jiangmin	Worm.WBNA.hbxu
MAX	malware (ai score=88)
Antiy-AVL	Trojan/Win32.Zbot
Microsoft	PWS:Win32/Zbot
ZoneAlarm	Worm.Win32.WBNA.ipi
GData	Gen:Heur.Mint.Dreidel.im0@xKmM2ulG
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Jorik.R35983
VBA32	BScope.Worm.WBNA
ALYac	Gen:Heur.Mint.Dreidel.im0@xKmM2ulG
APEX	Malicious
Rising	Malware.Undefined!8.C (TFE:3:I5Z5X2S3IIE)
Yandex	Trojan.GenAsa!N5lAMHdyzh8
Fortinet	W32/VBKrypt.MBSX!tr
Panda	Generic Malware
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Worm.Win32.WBNA.ipi?

Worm.Win32.WBNA.ipi removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X