Trojan:Win32/Vobfus!pz removal tips

The Trojan:Win32/Vobfus!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Vobfus!pz virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• Authenticode signature is invalid
• Behavioural detection: Injection (inter-process)
• CAPE detected the embedded pe malware family
• Attempts to disable Windows Auto Updates
• Anomalous binary characteristics
• Attempts to modify Explorer settings to prevent hidden files from being displayed
• Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan:Win32/Vobfus!pz?

File Info:
name: 7EC4DDD0BAF78EE5F32F.mlw
path: /opt/CAPEv2/storage/binaries/a771f3680f89e07c411a62302167249f369e996d386d1c4a8a2278640511e20c
crc32: 633A4B18
md5: 7ec4ddd0baf78ee5f32fca3d1cd82aac
sha1: 9342be0f9e54168283d9103bb8674f6a67c3809a
sha256: a771f3680f89e07c411a62302167249f369e996d386d1c4a8a2278640511e20c
sha512: c16fcbc744dfc86c4baf3cd7e725d78728dd71e062e47c9aa4bef09d7470944cc8a003519ab06de77fd0f584751f77192d329347faa708d3a7a52919e24cf636
ssdeep: 3072:EjdM6AOCMcy1imsW7A0g3XDYHYTvZm3ov5Q4/cMIVH5bEvhSSqeLSqnjO82Z:GaT9Fy1imdJgc4s2QRhH5IXy
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T159347425A3D0FB3DE860C6F82944469048AAEE3768D2AC17F6D15B1677B1E47F220773
sha3_384: 9c3bb8b4de4f8e92b7447d477a27fe6679b0d9e71a2f14ad331e1d913f50281b2ad490dcbcba20d42554a94ec7633008
ep_bytes: 68cc4e4000e8eeffffff000000000000
timestamp: 2012-06-07 20:29:37

Version Info:
Translation: 0x0409 0x04b0
Comments: Predefeat Causal
CompanyName: Denominava copyrightable oblongly
FileDescription: esthesiogen
LegalCopyright: presignificator ugualmente
LegalTrademarks: Antibishop dysphoric
ProductName: Smit tautonymic
FileVersion: 5.03
ProductVersion: 5.03
InternalName: ubydgxuwlg
OriginalFilename: ubydgxuwlg.exe

Trojan:Win32/Vobfus!pz also known as:

How to remove Trojan:Win32/Vobfus!pz?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.