Threat Database Worms Worm.Win32.VB.bms

Worm.Win32.VB.bms

The Worm.Win32.VB.bms worm is a threat infection that may spread using removable memory devices. The most common way in which worms like Worm.Win32.VB.bms may be spread is through the use of flash drives and SD cards of various types. To safeguard your machine from this infection vector, you should use a strong anti-malware application that is fully up-to-date to scan any portable drives that are attached to your computer. You should also take steps to isolate any drives connected to your PC and to prevent any type of automatic reading or running of content on a removable drive before its contents have been fully scanned and appraised. If your security software indicates that Worm.Win32.VB.bms is present on one of your drives, it is extremely important that you not only disinfect your computer but that you also take steps to protect all computers on your network and all computers that may have been in contact with your computer through an intermediary device.

What are the Consequences of being Infected by a Worm Like Worm.Win32.VB.bms

Worms are characterized by the fact that they may spread on their own using various techniques. Unlike Trojans, which require that the computer user or a secondary program execute its threatening file, Worm.Win32.VB.bms and worms like Worm.Win32.VB.bms may replicate themselves and spread from one computer to another. Some of the ways in which worms like Worm.Win32.VB.bms may infect different computers and devices include:

  1. Worm.Win32.VB.bms and similar worms may spread using removable memory devices. As soon as Worm.Win32.VB.bms infects a computer, Worm.Win32.VB.bms may search for all memory devices connected to the affected PC and create copies of itself on these devices. The creators of Worm.Win32.VB.bms rely on computer users then taking these memory devices to new computers in order to spread this threat to new PCs. This can be prevented by scanning all unknown memory devices before connecting them to your computer, disabling automatic run or read of these devices, and making sure that you can view all files (including hidden ones) on the device.
  2. Worm.Win32.VB.bms and other worms also may spread through a network very quickly. To do this, Worm.Win32.VB.bms may make copies of itself on any shared folders or drives on a network after Worm.Win32.VB.bms infects a computer. These types of attacks can be limited by being careful with the content that is shared on a network and the amount of access that network users are allowed to your PC. Most important, it is essential to keep your firewall activated at all times and that security and sharing settings on your network are set to prevent these types of pests from spreading.
  3. PC security analysts have observed that Worm.Win32.VB.bms and similar worms also may have the capacity to take over affected computer's email software or access social media networks in order to send out compromised emails or messages. These messages may contain a link or attached file that may allow Worm.Win32.VB.bms to infect the victim's computer when opened.

Worm.Win32.VB.bms may use clever tricks to make sure that computer users open infected files. For example, Worm.Win32.VB.bms may hide legitimate files and then make itself appear as a copy of the hidden file by copying its name and icon. Worm.Win32.VB.bms may be paired with other threats that allow third parties to monetize or take advantage of the wide variety of computers infected by Worm.Win32.VB.bms. Worm.Win32.VB.bms also may be paired with a backdoor infection that may allow an ill-minded person to have access to the infected machine. Essentially, Worm.Win32.VB.bms may spread using one of the above methods and then leave a 'backdoor' open for other threats. This may lead to other infections or to the loss of data on the infected computer.

File System Details

Worm.Win32.VB.bms may create the following file(s):
# File Name Detections
1. %CommonDocuments%\[1 RANDOM CHARACTER]My Videos.exe
2. %MyDocuments%\[1 RANDOM CHARACTER]My Music.exe
3. %Windir%\00614431.exe
4. c:\[1 RANDOM CHARACTER]Inetpub.exe
5. c:\[1 RANDOM CHARACTER]WINDOWS.exe
6. %CommonDocuments%\[1 RANDOM CHARACTER]My Pictures.exe
7. %MyDocuments%\[1 RANDOM CHARACTER]My eBooks.exe
8. c:\Ozcz[1 RANDOM CHARACTER]njobs.exe
9. c:\[1 RANDOM CHARACTER]Documents and Settings.exe
10. c:\[1 RANDOM CHARACTER]RECYCLER.exe
11. %CommonDocuments%\[1 RANDOM CHARACTER]My Music.exe
12. %DesktopDir%\[1 RANDOM CHARACTER]Unused Desktop Shortcuts.exe
13. %MyDocuments%\[1 RANDOM CHARACTER]My Pictures.exe
14. %Windir%\Ozcz[1 RANDOM CHARACTER]njobs.exe
15. c:\[1 RANDOM CHARACTER]Program Files.exe
16. [file and pathname of the sample #1]

Registry Details

Worm.Win32.VB.bms may create the following registry entry or registry entries:
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile]

Trending

Most Viewed

Loading...