Home Malware Programs Worms Worm.Win32.VBNA.b

Worm.Win32.VBNA.b

Posted: June 24, 2010

Worm.Win32.VBNA.b (or Mal/VB-A) is a network-aware computer Worm which attempts to replicate across any existing network. Worm.Win32.VBNA.b appears as a Windows PE EXE file and poses a high security risk to PC safety. Once a system is infected with Worm.Win32.VBNA.b it may experience data loss and other misbehavior, including a rapid decrease in performance. Remove Worm.Win32.VBNA.b immediately using an updated malware remover.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %AppData%\Cerulean.lic
    2 %AppData%\Microsoft\Media Player\Licence\blueray.lic
    3 %AppData%\Microsoft\Media Player\Licence\Cablemusic.lic
    4 %AppData%\Microsoft\Media Player\Licence\eyed.lic
    5 %AppData%\Microsoft\Media Player\Licence\peaz.lic
    6 %Windir%\CGZipLibrary.dll
    7 %Windir%\IExplorer.txt
    8 %Windir%\libmySQL.dll
    9 %Windir%\Unzip32.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{293364AE-43F8-11D3-BC2D-4000000A2806}\InprocServer32][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{293364AE-43F8-11D3-BC2D-4000000A2806}\ProgID][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{293364AE-43F8-11D3-BC2D-4000000A2806}\TypeLib][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{293364AE-43F8-11D3-BC2D-4000000A2806}\VERSION][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{293364AE-43F8-11D3-BC2D-4000000A2806}][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{293364BA-43F8-11D3-BC2D-4000000A2806}\VERSION]
Loading...