Categories: Worm

Worm.VobfusMF.S23950353 removal

The Worm.VobfusMF.S23950353 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Worm.VobfusMF.S23950353 virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Worm.VobfusMF.S23950353?


File Info:
name: 3DF38E2E9669B4F8B9FE.mlwpath: /opt/CAPEv2/storage/binaries/5c84ff00cac4a6b30148ceeb562a818c3982999f9b13e6b963431f4fbe41094ccrc32: 08167073md5: 3df38e2e9669b4f8b9fe7faf64993a8bsha1: e665b6d4d24f7efac9a2a125eec16528aa1dfea8sha256: 5c84ff00cac4a6b30148ceeb562a818c3982999f9b13e6b963431f4fbe41094csha512: eacdbffc50f6581f962e81d444f639b247c9231cf763b9c6381d803bed96b2e85d8d72c67e16bc571683185009bba646052848a9280db95ce52328a60134005bssdeep: 1536:Eol0ccuBnotOB+dGrNjjmJ2NuKuFr1M5Br2QbCcIzQih:YuBotOB++jOKbGZtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T18DA3409F7FF52244F9590638ADF386FF19D2A98C6A1B4142673036641BEFE021C24A5Fsha3_384: 92f51339faad9cc08ef0b8098f5f8d9736cf2e6ab66f3b2e11a3a1e38a01cb7f3a034039794b6540e2641495a99c2530ep_bytes: 6894124000e8f0ffffff000048000000timestamp: 2004-03-09 19:19:11
Version Info:
Translation: 0x0409 0x04b0ProductName: VfJvjNFileVersion: 1.00ProductVersion: 1.00InternalName: kapnfAOriginalFilename: kapnfA.exe

Worm.VobfusMF.S23950353 also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Barys.950
FireEye	Generic.mg.3df38e2e9669b4f8
CAT-QuickHeal	Worm.VobfusMF.S23950353
Skyhigh	BehavesLike.Win32.VBObfus.cm
McAfee	W32/Autorun.worm.aaeh
Cylance	unsafe
VIPRE	Trojan.GenericKDZ.82864
Sangfor	Suspicious.Win32.Save.vb
K7AntiVirus	EmailWorm ( 0054d10f1 )
Alibaba	Worm:Win32/Jorik.75108c6a
K7GW	EmailWorm ( 0054d10f1 )
Cybereason	malicious.4d24f7
Arcabit	Trojan.Barys.950
BitDefenderTheta	Gen:NN.ZevbaF.36744.gm1@aW9rlbbi
VirIT	Trojan.Win32.Generic.CKVZ
Symantec	W32.Changeup
ESET-NOD32	Win32/AutoRun.VB.AVO
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Trojan.Changeup-6169544-0
Kaspersky	Trojan.Win32.Jorik.Vobfus.ahog
BitDefender	Gen:Variant.Barys.950
NANO-Antivirus	Trojan.Win32.Jorik.cihugs
SUPERAntiSpyware	Trojan.Agent/Gen-Autorun
Avast	Win32:Vitro [Inf]
Tencent	Trojan.Win32.Jorik.pa
TACHYON	Trojan/W32.VB-Jorik.104026
Emsisoft	Gen:Variant.Barys.950 (B)
Baidu	Win32.Worm.VB.nn
F-Secure	Trojan.TR/Jorik.Vobfus.ahog
DrWeb	Win32.HLLW.Autoruner1.14788
Zillya	Trojan.Jorik.Win32.582967
TrendMicro	WORM_VOBFUS.SMPS
Trapmine	malicious.high.ml.score
Sophos	W32/Vobfus-AH
Ikarus	Trojan.Patched
Varist	W32/Vobfus.AJ.gen!Eldorado
Avira	TR/Jorik.Vobfus.ahog
Antiy-AVL	Worm/Win32.WBNA.gen
Kingsoft	malware.kb.a.1000
Xcitium	Worm.Win32.VB.AUA@4o7zkg
Microsoft	Worm:Win32/Vobfus.EH
ViRobot	Worm.Win32.A.VBNA.102400.AZ
ZoneAlarm	Trojan.Win32.Jorik.Vobfus.ahog
GData	Win32.Trojan.PSE1.8A9OXW
Google	Detected
AhnLab-V3	Trojan/Win32.Vobfus.R150635
Acronis	suspicious
ALYac	Trojan.GenericKDZ.82864
MAX	malware (ai score=82)
VBA32	Trojan.Jorik
Malwarebytes	Generic.Malware.AI.DDS
Panda	W32/Vobfus.GEW.worm
TrendMicro-HouseCall	WORM_VOBFUS.SMPS
Rising	Worm.VobfusEx!1.99DC (CLASSIC)
Yandex	Trojan.GenAsa!n9vpFGRhqIs
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/VBObfus.AU!tr
AVG	Win32:Vitro [Inf]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)