Worm

How to remove “Worm:Win32/Mofksys!pz”?

Malware Removal

The Worm:Win32/Mofksys!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Worm:Win32/Mofksys!pz virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Worm:Win32/Mofksys!pz?



File Info:

name: 848F1050F8FBE0AFB855.mlw
path: /opt/CAPEv2/storage/binaries/225fd93a7675f17268c32572d2c1934eed9ace675441c22f6d4656d767aa71c0
crc32: 851FA45C
md5: 848f1050f8fbe0afb855ecef25de7ac2
sha1: c5caa08b09645ae4362dfd5aeb094ba678e0a488
sha256: 225fd93a7675f17268c32572d2c1934eed9ace675441c22f6d4656d767aa71c0
sha512: de69217f1cd866c7ae7ee87a16ca6e6af5681284b9008b1f5a56995d4fb70acfc0bbc6de4f135f971779bd4ca9ae38dd20464a48a7fc1137307416e1df68926b
ssdeep: 1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVX5:UVqoCl/YgjxEufVU0TbTyDDalR5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A1D32A33AE01903ED525CBF4ACA5E52AB9761E365BE09D0B7366B70426B611376F030F
sha3_384: 4aef48f7f078e76ff96955a7f418006f14b6265f7f5482ebcfd4f2486a591d8ccb4366f051cdb4985548740d5fdd62cd
ep_bytes: 68dc3a4000e8eeffffff000048000000
timestamp: 2013-04-01 07:08:22


Version Info:

Translation: 0x0409 0x04b0
ProductName: Project1
FileVersion: 1.00
ProductVersion: 1.00
InternalName: TJprojMain
OriginalFilename: TJprojMain.exe

Worm:Win32/Mofksys!pz also known as:

BkavW32.WatermarkHQc.PE
LionicTrojan.Win32.Agent.tnrh
tehtrisGeneric.Malware
DrWebWin32.HLLP.Swisyn
MicroWorld-eScanWin32.Gosys.B
ClamAVWin.Trojan.VBGeneric-6735875-0
FireEyeGeneric.mg.848f1050f8fbe0af
CAT-QuickHealW32.Mofksys.A4
SkyhighBehavesLike.Win32.Swisyn.cm
McAfeeW32/Swisyn.b
Cylanceunsafe
VIPREWin32.Gosys.B
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaWorm:Win32/Mofksys.384
K7GWTrojan ( 0058e74a1 )
K7AntiVirusVirus ( 00579e181 )
BitDefenderThetaAI:Packer.FB4C4F7A20
VirITTrojan.Win32.Agent4.ALYU
Elasticmalicious (high confidence)
ESET-NOD32Win32/VB.NBI
ZonerTrojan.Win32.88925
APEXMalicious
CynetMalicious (score: 100)
KasperskyVirus.Win32.VB.mz
BitDefenderWin32.Gosys.B
NANO-AntivirusTrojan.Win32.Swisyn.flhacn
AvastWin32:VB-OJQ [Wrm]
TencentWorm.Win32.Wbna.wf
TACHYONWorm/W32.VB-Mofksys.Zen
EmsisoftWin32.Gosys.B (B)
F-SecureTrojan.TR/Patched.Ren.Gen
BaiduWin32.Worm.VB.b
ZillyaVirus.HLLP.Win32.1
TrendMicroPE_SWISB.A-O
Trapminemalicious.high.ml.score
SophosTroj/Agent-ABZF
IkarusWorm.Mofksys
GDataWin32.Trojan.PSE1.1NLNP9O
JiangminTrojan/Agent.hxgb
WebrootW32.Trojan.Gen
GoogleDetected
AviraTR/Patched.Ren.Gen
Antiy-AVLTrojan/Win32.Agent
Kingsoftmalware.kb.a.1000
XcitiumTrojWare.Win32.VB.QOTY@4qfd0g
ArcabitWin32.Gosys.B
ZoneAlarmVirus.Win32.VB.mz
MicrosoftWorm:Win32/Mofksys!pz
VaristW32/Trojan.UEJO-9077
AhnLab-V3Worm/Win32.Mofksys.R198176
Acronissuspicious
VBA32TScope.Trojan.VB
ALYacWin32.Gosys.B
MAXmalware (ai score=88)
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Spy.AT
TrendMicro-HouseCallPE_SWISB.A-O
RisingTrojan.Agent!1.6A70 (CLASSIC)
YandexTrojan.GenAsa!182yZo+3+DM
SentinelOneStatic AI – Malicious PE
MaxSecureVirus.W32.Agent.xjgj
FortinetW32/VB.QCC!tr.dldr
AVGWin32:VB-OJQ [Wrm]
Cybereasonmalicious.b09645
DeepInstinctMALICIOUS

How to remove Worm:Win32/Mofksys!pz?

Worm:Win32/Mofksys!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment