Worm.Win32.Vobfus.evfh removal

The Worm.Win32.Vobfus.evfh is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Worm.Win32.Vobfus.evfh virus can do?

• Executable code extraction
• Expresses interest in specific running processes
• Reads data out of its own binary image
• Drops a binary and executes it
• Installs itself for autorun at Windows startup
• Creates a hidden or system file
• Creates a slightly modified copy of itself
• Anomalous binary characteristics
• Attempts to modify Explorer settings to prevent hidden files from being displayed

How to determine Worm.Win32.Vobfus.evfh?

File Info:
crc32: D7BFDDD4
md5: 94f5fc2b7b3fd8032c68a2aae15ae73c
name: 94F5FC2B7B3FD8032C68A2AAE15AE73C.mlw
sha1: ffee74264da59b81f9ab92117f917bd32847bd88
sha256: 8c9baf3d7bde373299d5a03313ffcd9a4f8451f70af6596d62b89471a92c05a7
sha512: 7d6d82ea572b5b17fc1e7a4ba12b0c12abcc09a64b4039a5d678a123f73d3a46752bf86ee16c934910081308923d659f2ede76a990c06e6327d0c5174efddcef
ssdeep: 6144:kAKVQpyyUf9dgAVRKlqBiErIsKnPmb7/jWal+FfAje+5/RxoOsutOSD/uP39RWy:kAAyUf9DRKlqgErIsKnPmb7/jWa1e+5
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
FileVersion: 1.00
Translation: 0x0409 0x04b0

Worm.Win32.Vobfus.evfh also known as:

How to remove Worm.Win32.Vobfus.evfh?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.