Should I remove “Worm.Win32.Vobfus.effh”?

The Worm.Win32.Vobfus.effh is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Worm.Win32.Vobfus.effh virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• Authenticode signature is invalid
• Behavioural detection: Injection (inter-process)
• Anomalous binary characteristics
• Attempts to modify Explorer settings to prevent hidden files from being displayed

How to determine Worm.Win32.Vobfus.effh?

File Info:
name: 861F2D2F5E88ED363A0A.mlw
path: /opt/CAPEv2/storage/binaries/bbdf979248d0ac4ca0a90ed29ae3a347de62c58ce022714668236e45e486b784
crc32: E3335DD9
md5: 861f2d2f5e88ed363a0a524a0bc3fe64
sha1: bc394c5548131da048716ac74279152d37522b9a
sha256: bbdf979248d0ac4ca0a90ed29ae3a347de62c58ce022714668236e45e486b784
sha512: 56e8cff671c7a2554da6ee90254c688b7b7dbef4343c8c7ee464eecdf19bb0f356f1c773472f198c7903efe27aab48a2e5c8660a2c25fb9d9b8fa6f09a1fe2c5
ssdeep: 6144:teY03FRINO5WcBzjkBP18yAYU7vKd3EUXWidJhKnvmb7/D26XgZKIQ0OfsJy2mJK:t23fINO5WcBzjkV183Kd3EUXWidJhKnL
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T120549562BA18F46AD19388F02D2D9356383E6D760290BC0F7681BF2861B2757B4F475F
sha3_384: da78bc43a9da11f59fe3ee3fabf4d45c44524f7808dbffeb1d3308e0d7e7a81f2686cf6f818e54a9a7c46bfb6f7ddaec
ep_bytes: 6808474000e8eeffffff000040000000
timestamp: 2011-12-28 05:59:41

Version Info:
Translation: 0x0409 0x04b0
ProductName: yetOeNXQ
FileVersion: 1.00
ProductVersion: 1.00
InternalName: pxvhsPAa
OriginalFilename: pxvhsPAa.exe

Worm.Win32.Vobfus.effh also known as:

How to remove Worm.Win32.Vobfus.effh?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.