Worm

Worm:Win32/VB malicious file

Malware Removal

The Worm:Win32/VB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm:Win32/VB virus can do?

  • Executable code extraction
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Worm:Win32/VB?


File Info:

crc32: B484372B
md5: a26ae93621d7f1d5942875a8ed12a46f
name: A26AE93621D7F1D5942875A8ED12A46F.mlw
sha1: a72e9f9094d33a1f0e5cbe3e776922e7714e901d
sha256: 47c36becd70767af34e2654b1132e68a71299229a47d727f2a18fa09c4fced95
sha512: 22c86242774e538dc9c0d6dc00e00a7ac29ed1452d4346b9f7631010d8fb1fceef176e9b452133f624586dfca6f9996254ea5aeac9537fbf5450a025e30f17d2
ssdeep: 1536:kdvQVgd54vmxVdYOUqB4Y7hkKP54vTgzQJdQ:qvL7PdY0vvhdzOQ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
InternalName: My Things
FileVersion: 1.00
LegalTrademarks: 2007
Comments: Butterfly.
ProductName: butterfly
ProductVersion: 1.00
OriginalFilename: My Things.exe

Worm:Win32/VB also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 005640b91 )
Elasticmalicious (high confidence)
DrWebWin32.HLLW.Schedl.1
CynetMalicious (score: 99)
ALYacWin32.Worm.VB.NKE
CylanceUnsafe
ZillyaVirus.VB.Win32.132
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:Win32/Starter.ali2000005
K7GWTrojan ( 005640b91 )
Cybereasonmalicious.621d7f
BaiduWin32.Worm.VB.ti
CyrenW32/Worm.IYYD-8094
SymantecW32.SillyDC
ESET-NOD32Win32/VB.EU
ZonerWorm.Win32.381
APEXMalicious
AvastWin32:VB-ECI
ClamAVWin.Dropper.XtremeRAT-9858015-0
KasperskyVirus.Win32.VB.eu
BitDefenderWin32.Worm.VB.NKE
NANO-AntivirusVirus.Win32.VB.bcflkm
ViRobotTrojan.Win32.A.Cosmu.211388
MicroWorld-eScanWin32.Worm.VB.NKE
TencentTrojan.Win32.VB.yoh
Ad-AwareWin32.Worm.VB.NKE
SophosML/PE-A + W32/VB-DWT
ComodoWin32.VB.EU@3gpg
BitDefenderThetaAI:Packer.A8375E2D1D
VIPRETrojan.Win32.Generic!BT
TrendMicroWORM_VB.BLQ
McAfee-GW-EditionBehavesLike.Win32.Swisyn.dm
FireEyeGeneric.mg.a26ae93621d7f1d5
EmsisoftWin32.Worm.VB.NKE (B)
SentinelOneStatic AI – Malicious PE
JiangminWin32/VB.e
AviraTR/VB.ayz
eGambitUnsafe.AI_Score_100%
Antiy-AVLTrojan/Generic.ASBOL.C0E
KingsoftWin32.Troj.Generic.a.(kcloud)
MicrosoftWorm:Win32/VB
GDataWin32.Worm.VB.NKE
AhnLab-V3HEUR/Fakon.mwf.X1381
McAfeeGeneric VB.do
MAXmalware (ai score=89)
VBA32Trojan.VBO.05370
MalwarebytesVB.Virus.FileInfector.DDS
PandaW32/Distas.F.worm
TrendMicro-HouseCallWORM_VB.BLQ
RisingTrojan.VB!1.6A80 (CLASSIC)
YandexTrojan.GenAsa!g5zDFEdMqso
IkarusWorm.Win32.VB
MaxSecureVirus.W32.VB.EU
FortinetW32/VB.EU!worm
AVGWin32:VB-ECI
Qihoo-360Worm.Win32.FakeFolder.BW

How to remove Worm:Win32/VB?

Worm:Win32/VB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment