Worm.Vobfus.VB information

The Worm.Vobfus.VB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Worm.Vobfus.VB virus can do?

• Executable code extraction
• Attempts to connect to a dead IP:Port (2 unique times)
• Creates RWX memory
• A process attempted to delay the analysis task.
• Expresses interest in specific running processes
• Reads data out of its own binary image
• Drops a binary and executes it
• Installs itself for autorun at Windows startup
• Creates a hidden or system file
• Checks the system manufacturer, likely for anti-virtualization
• Creates a slightly modified copy of itself
• Anomalous binary characteristics
• Attempts to modify Explorer settings to prevent hidden files from being displayed

Related domains:

How to determine Worm.Vobfus.VB?

File Info:
crc32: 97343AC8
md5: a49111c4d2da6d074aac9306cc6097a5
name: A49111C4D2DA6D074AAC9306CC6097A5.mlw
sha1: 8cf8db5f38bbdf40a08baedfae2407effaa2b22d
sha256: 33aa526cf7b7ca63e242aa368a49858fb5041505c8f26f7bab8dacde971a7f90
sha512: ecbabc452717c8d1919f69785c14ca5b8abb3a28313789b0615cb8c0ff60d9672c6cbbe14012dfacbaed6b0f715f6bcd2aea38762fc8c04a50a21968bb5fc28c
ssdeep: 3072:y1FWXibayp4D4dMz4n4N4t4R4aEIIIIzy:y1FWXibvxMdEIIIIz
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
ProductVersion: 1.50
InternalName: trwCiecE
FileVersion: 1.50
OriginalFilename: trwCiecE.exe
ProductName: xn

Worm.Vobfus.VB also known as:

How to remove Worm.Vobfus.VB?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.