Worm.Win32.Vobfus.axgu malicious file

The Worm.Win32.Vobfus.axgu is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Worm.Win32.Vobfus.axgu virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• Authenticode signature is invalid
• Behavioural detection: Injection (inter-process)
• CAPE detected the embedded pe malware family
• Attempts to disable Windows Auto Updates
• Anomalous binary characteristics
• Attempts to modify Explorer settings to prevent hidden files from being displayed
• Yara detections observed in process dumps, payloads or dropped files

How to determine Worm.Win32.Vobfus.axgu?

File Info:
name: E576A806C1A6A554EDCB.mlw
path: /opt/CAPEv2/storage/binaries/65c1abca641dcd03ce2af48260e477c95c3cd90fddcaa36989f1466114996bd8
crc32: D10C25F4
md5: e576a806c1a6a554edcb2a512de86f56
sha1: 777923b85723f75dba3ccc4d6f6bad8b8081827a
sha256: 65c1abca641dcd03ce2af48260e477c95c3cd90fddcaa36989f1466114996bd8
sha512: b06008a16656417d247fc35b7885ae86c879621917e2417abfd8f55f2350785c39b71b0ad9eb15227e75b13d68126d9dc9995ccd2a2b64c34887068d63a9ad38
ssdeep: 1536:pwWijsiXhgIuFQFvHwd6PXOYb7gXWgWKsEHTINeG0h/:+xjsiRg/FQByYb7gvsEz
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CEF30CAAFB81907DF55E117C16EAE6F325A274488D2FC089B634B3A844DAD118CFD713
sha3_384: a6256fb37762d5e14fc6a329379c495e8b78169a2d13806421aad8d055df05f75728511e756ff8282c10e3d8981954ae
ep_bytes: 6880124000e8eeffffff000048000000
timestamp: 2012-04-11 19:29:09

Version Info:
0: [No Data]

Worm.Win32.Vobfus.axgu also known as:

How to remove Worm.Win32.Vobfus.axgu?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.