W32/VBNA-AT

Category: Viruses and Spyware Protection available since:17 Jan 2013 03:09:40 (GMT)
Type: Win32 worm Last Updated:17 Jan 2013 03:09:40 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Examples of W32/VBNA-AT include:

Example 1

File Information

Size
308K
SHA-1
2955e2882a2734f17778c8f600b0f0d273231e9b
MD5
87d4b7a959fb2ab9fb225aceaaaf478f
CRC-32
353a0bbc
File type
Windows executable
First seen
2011-10-11

Example 2

File Information

Size
308K
SHA-1
5049b422a589832abdb89686e140b849ce535b6f
MD5
d00f98dfb3416b90655cd2354b8737db
CRC-32
f0f1ee27
File type
Windows executable
First seen
2013-01-16

Runtime Analysis

Registry Keys Created
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run
    cjluz
    c:\Documents and Settings\test user\cjluz.exe /r
  • HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    NoAutoUpdate
    0x00000001
Registry Keys Modified
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
    ShowSuperHidden
    0x00000000
DNS Requests
  • ns1.cpuchecks.com

Example 3

File Information

Size
308K
SHA-1
d60714350ba8f82544548567a336c258a899956f
MD5
1cb0dd1af33b15a98348ee75638609d1
CRC-32
7bdeac59
File type
Windows executable
First seen
2013-01-16

Runtime Analysis

Registry Keys Created
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run
    cebec
    c:\Documents and Settings\test user\cebec.exe /j
  • HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    NoAutoUpdate
    0x00000001
Registry Keys Modified
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
    ShowSuperHidden
    0x00000000
DNS Requests
  • ns1.cpuchecks.com

download Try Sophos products for free
Download now