Worm.Win32.VBNA.b

Worm.Win32.VBNA.b Description

Worm.Win32.VBNA.b (or Mal/VB-A) is a network-aware computer Worm which attempts to replicate across any existing network. Worm.Win32.VBNA.b appears as a Windows PE EXE file and poses a high security risk to PC safety. Once a system is infected with Worm.Win32.VBNA.b it may experience data loss and other misbehavior, including a rapid decrease in performance. Remove Worm.Win32.VBNA.b immediately using an updated malware remover.

Worm.Win32.VBNA.b Automatic Detection Tool (Recommended)

Is your PC infected with Worm.Win32.VBNA.b? To safely & quickly detect Worm.Win32.VBNA.b, we highly recommend you run the malware scanner listed below.

Download SpyHunter's* Malware Scanner to detect Worm.Win32.VBNA.b What happens if Worm.Win32.VBNA.b does not let you open SpyHunter or blocks the Internet?

File System Modifications

The following files were created in the system:

#	File Name
1	%AppData%\Cerulean.lic
2	%AppData%\Microsoft\Media Player\Licence\blueray.lic
3	%AppData%\Microsoft\Media Player\Licence\Cablemusic.lic
4	%AppData%\Microsoft\Media Player\Licence\eyed.lic
5	%AppData%\Microsoft\Media Player\Licence\peaz.lic
6	%Windir%\CGZipLibrary.dll
7	%Windir%\IExplorer.txt
8	%Windir%\libmySQL.dll
9	%Windir%\Unzip32.dll

Registry Modifications

The following newly produced Registry Values are:
HKEY..\..\..\..{Subkeys}[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{293364AE-43F8-11D3-BC2D-4000000A2806}\InprocServer32][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{293364AE-43F8-11D3-BC2D-4000000A2806}\ProgID][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{293364AE-43F8-11D3-BC2D-4000000A2806}\TypeLib][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{293364AE-43F8-11D3-BC2D-4000000A2806}\VERSION][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{293364AE-43F8-11D3-BC2D-4000000A2806}][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{293364BA-43F8-11D3-BC2D-4000000A2806}\VERSION]

Posted: June 24, 2010 | By SpywareRemove