Worm:Win32/VB.HA information

Malware Removal

The Worm:Win32/VB.HA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Worm:Win32/VB.HA virus can do?

  • Executable code extraction
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Worm:Win32/VB.HA?


File Info:

crc32: 7FB7EE04
md5: f33b5eeb8a63fc25779bf4a15794f010
name: F33B5EEB8A63FC25779BF4A15794F010.mlw
sha1: 77bfc0b5f1e965774986905abac28adb4173f706
sha256: 3e1245bc2e20281fc1fe1cd4b3041caea894993f4b4fabdca7658bf4d4d25b65
sha512: fc47e26a4c4e9ab5ad2d9886f7e4760d45b0ef17fb4ef13fc942b2a555cd5b6648fcdfe508c84f75e07a52f77a7e2a8f97289a9e2116cebc80720bb1b1db809e
ssdeep: 24576:g+iuXbZKXJrr186amIWgVRFyIMX5xv+ZXmRE43sbjiVNcC9oJLSb+MN:g+7XbQsJJWgg5X5kxmRR8OND92Lc
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
ProductVersion: 1.00
InternalName: honey
FileVersion: 1.00
OriginalFilename: honey.exe
ProductName: honey

Worm:Win32/VB.HA also known as:

BkavW32.AIDetect.malware1
K7AntiVirusRiskware ( 004bbad11 )
LionicTrojan.Win32.Blocker.tnHs
Elasticmalicious (high confidence)
DrWebWin32.HLLW.Autoruner.33600
CynetMalicious (score: 100)
CAT-QuickHealWorm.VB.HA2
ALYacGen:Trojan.Heur.pj3@s1PvyFiib
CylanceUnsafe
ZillyaTrojan.Blocker.Win32.40277
SangforVirus_Suspicious.Win32.Sality.bh
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Starter.ali2000005
K7GWRiskware ( 004bbad11 )
Cybereasonmalicious.b8a63f
BaiduWin32.Worm.Agent.ah
CyrenW32/VBTrojan.17E!Maximus
SymantecW32.SillyFDC
ESET-NOD32a variant of Win32/AutoRun.VB.AJN
APEXMalicious
AvastWin32:VB-REJ [Trj]
ClamAVWin.Trojan.KillAV-46
KasperskyTrojan-Ransom.Win32.Blocker.ileg
BitDefenderGen:Trojan.Heur.pj3@s1PvyFiib
NANO-AntivirusTrojan.Win32.AutoRun.bqowp
ViRobotWorm.Win32.A.AutoRun.299008
MicroWorld-eScanGen:Trojan.Heur.pj3@s1PvyFiib
TencentWorm.Win32.AutoRun.bkff
Ad-AwareGen:Trojan.Heur.pj3@s1PvyFiib
SophosML/PE-A + Mal/VB-AJY
ComodoTrojWare.Win32.Agent.~JH1@1o8154
BitDefenderThetaAI:Packer.879C6B8E1D
VIPREWorm.Win32.Autorun.bkff (v)
TrendMicroMal_OtorunN
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
FireEyeGeneric.mg.f33b5eeb8a63fc25
EmsisoftGen:Trojan.Heur.pj3@s1PvyFiib (B)
SentinelOneStatic AI – Malicious PE
JiangminWorm/AutoRun.anad
AviraTR/Spy.Gen
eGambitUnsafe.AI_Score_96%
Antiy-AVLTrojan/Generic.ASMalwS.1320
MicrosoftWorm:Win32/VB.HA
SUPERAntiSpywareTrojan.Agent/Gen-Honey
ZoneAlarmTrojan-Ransom.Win32.Blocker.ileg
GDataGen:Trojan.Heur.pj3@s1PvyFiib
AhnLab-V3HEUR/Fakon.mwf.X1381
Acronissuspicious
McAfeeW32/Autorun.worm.hu
MAXmalware (ai score=100)
VBA32Worm.VB.FakeCodec
MalwarebytesWorm.AutoRun
PandaGeneric Malware
TrendMicro-HouseCallMal_OtorunN
RisingWorm.VB!1.64A6 (CLASSIC)
YandexTrojan.GenAsa!oIvGCx/uxVU
IkarusTrojan.VBCrypt
MaxSecureWorm.W32.AutoRun.bkff
FortinetW32/Genome.MYIT!tr
AVGWin32:VB-REJ [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Blocker.HwMAEpsA

How to remove Worm:Win32/VB.HA?

Worm:Win32/VB.HA removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment