Worm.Win32.Vobfus.dfhj malicious file

The Worm.Win32.Vobfus.dfhj is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Worm.Win32.Vobfus.dfhj virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Authenticode signature is invalid
• Behavioural detection: Injection (inter-process)
• CAPE detected the embedded pe malware family
• Attempts to disable Windows Auto Updates
• Anomalous binary characteristics
• Attempts to modify Explorer settings to prevent hidden files from being displayed
• Yara detections observed in process dumps, payloads or dropped files

How to determine Worm.Win32.Vobfus.dfhj?

File Info:
name: EA11961B76A5B7BE0002.mlw
path: /opt/CAPEv2/storage/binaries/6062e012e6822feba749f85ca1c60a6774d10aa21553fd4b01d4b91a284d0e00
crc32: 4036615A
md5: ea11961b76a5b7be0002f1fca6675d2d
sha1: 82d690c907ee6ef73d01d1d11641f1e202b136be
sha256: 6062e012e6822feba749f85ca1c60a6774d10aa21553fd4b01d4b91a284d0e00
sha512: 9fd78a9009784a43e7e408d4a4c1e75055be6af07ef9bec2485903c589242840112b418b6074fbce952801f9b8db66382761e6a8102365036939583e2c049c75
ssdeep: 3072:6IoGdYRLoeEdRos/eaqFnqWDb+uTyLDC6s5sSYqGlC6YViZj5HQXZmmJ0yCFioxq:V5cKPpm2lC6YViZj5HQXZmmJ0yCF9Bxb
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E204B37DB350973EE09AD1F6286A8398005DAE3A15E5E407F7C22B59B5F09E3D231393
sha3_384: f9af3347bfb6c901085c5bc6c0e882df68ab2139c064af786fbb6da4415e2a9ad2a9541b0a3ae9b2567979107cee0c0e
ep_bytes: 6858384000e8eeffffff000000000000
timestamp: 2012-01-21 17:58:45

Version Info:
Translation: 0x0409 0x04b0
ProductName: NfRFBuOg
FileVersion: 1.00
ProductVersion: 1.00
InternalName: ktQXXoJwfz
OriginalFilename: ktQXXoJwfz.exe

Worm.Win32.Vobfus.dfhj also known as:

How to remove Worm.Win32.Vobfus.dfhj?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.