Categories: Worm

Worm:Win32/VB.FM removal tips

The Worm:Win32/VB.FM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Worm:Win32/VB.FM virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Uses Windows utilities for basic functionality
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Deletes executed files from disk
Anomalous binary characteristics

How to determine Worm:Win32/VB.FM?


File Info:
name: E7B68059EA69EE7AC560.mlwpath: /opt/CAPEv2/storage/binaries/022c996fb3c93ce4f3f21de93a0940cc4b29604a7d18ab42b3de99b3cdb7883bcrc32: 61BDF369md5: e7b68059ea69ee7ac560e93d2f29b120sha1: c14b3d33eede850e1bb2fa863b148ce3dad1e66csha256: 022c996fb3c93ce4f3f21de93a0940cc4b29604a7d18ab42b3de99b3cdb7883bsha512: db584f076e4ec622ad653c32e63baaf38496e5b0e9689088942752189bdff6ec48450ec8f660ec8c967b88ed06e239fa572623e5c0b68e0c32f28b23fb59cf2bssdeep: 12288:uzR+9kqPx3IeTceYUzwHJem7OzwHJednI:gRlqhIeTceYqwpemIwpednItype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1BAC49E41EA00A278D8C365F17909CB3BA9366D12DB1649C39BB83DD67F701E25A7630Fsha3_384: 2a3e0f62a2a4f32b5e803c2584ee30174eb92ef686a8865ad66ebf3f992d1d7f1ed8abc734a4bb4e1b2cbbeef05acf99ep_bytes: 68c83b4000e8f0ffffff000000000000timestamp: 2007-04-20 11:55:45
Version Info:
Translation: 0x0804 0x04b0ProductName:  FileVersion: 1.00ProductVersion: 1.00InternalName: avpOriginalFilename: avp.exe

Worm:Win32/VB.FM also known as:

Bkav	W32.AIDetectMalware
Lionic	Virus.Win32.VB.lhVA
Elastic	malicious (high confidence)
MicroWorld-eScan	Dropped:Win32.Worm.VB.GF
Skyhigh	BehavesLike.Win32.Fujacks.hh
McAfee	GenericR-ERA!E7B68059EA69
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.vb
K7AntiVirus	Trojan ( 000ef5af1 )
Alibaba	virus:Win32/InfectPE.ali2000007
K7GW	Trojan ( 000ef5af1 )
Cybereason	malicious.3eede8
Arcabit	Win32.Worm.VB.GF
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	Win32/VB.GO
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Worm.VB-658
Kaspersky	Worm.Win32.VB.go
BitDefender	Dropped:Win32.Worm.VB.GF
NANO-Antivirus	Trojan.Win32.VB.lotx
Avast	Win32:VB-EJQ [Wrm]
Rising	Worm.VB.akx (CLASSIC)
Emsisoft	Dropped:Win32.Worm.VB.GF (B)
F-Secure	Trojan.TR/VB.Downloader.Gen
DrWeb	Trojan.Siggen4.21498
Zillya	Worm.VB.Win32.1603
TrendMicro	WORM_VB.FWK
FireEye	Generic.mg.e7b68059ea69ee7a
Sophos	Mal/VBWorm-C
Ikarus	HackTool.Win32.Kiser
Jiangmin	Worm/VB.pje
Varist	W32/VBKrypt.BFB.gen!Eldorado
Avira	TR/VB.Downloader.Gen
MAX	malware (ai score=82)
Antiy-AVL	Worm/Win32.VB
Kingsoft	malware.kb.a.1000
Xcitium	Worm.Win32.VB.GO@4737
Microsoft	Worm:Win32/VB.FM
ViRobot	Worm.Win32.VB.61440.B
ZoneAlarm	Worm.Win32.VB.go
GData	Win32.Worm.Agent.BIL
Google	Detected
AhnLab-V3	Worm/Win32.VB.R70863
BitDefenderTheta	AI:Packer.2E166C6A1D
ALYac	Dropped:Win32.Worm.VB.GF
VBA32	TScope.Trojan.VB
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	WORM_VB.FWK
Tencent	Virus.Win32.VB.zf
Yandex	Trojan.GenAsa!Bx8Fg9B1WP8
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.85306.susgen
Fortinet	W32/Generic.AP.19EE958!tr
AVG	Win32:VB-EJQ [Wrm]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)