Worm

Worm:Win32/Mofksys!pz removal guide

Malware Removal

The Worm:Win32/Mofksys!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Worm:Win32/Mofksys!pz virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Worm:Win32/Mofksys!pz?



File Info:

name: 74CF1DB5F17F5AF15960.mlw
path: /opt/CAPEv2/storage/binaries/93d5e5bdcf960038e43c1a5629a6e75e6e2623731e5406cfd0b0a5836091e286
crc32: 54B4C334
md5: 74cf1db5f17f5af1596041acda4e3d47
sha1: cfe7bbbcc2697de1b671134b6f03f1ce8562debc
sha256: 93d5e5bdcf960038e43c1a5629a6e75e6e2623731e5406cfd0b0a5836091e286
sha512: d63ec4f387b799f750c97916d199a3bc3dead47830eb2a67cef26cfe234acacfb88d50a63fb10c941054eca516d3784e34b90b7d048463c6ae9d2d521269ade0
ssdeep: 1536:4fsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVL+HN3333333333v:4VqoCl/YgjxEufVU0TbTyDDal+R
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1ECD329237E14642ED911C6F198A4C63EBA215E3A1BF29D0773A7BB002A7220775F131F
sha3_384: 96969e072a898cae0c6e740471c5af64d95b31039e05c73b48ccf701a48c04eda3afc18868ceefa42fe6707bc3a50d38
ep_bytes: 68dc3a4000e8eeffffff000048000000
timestamp: 2013-04-01 07:08:22


Version Info:

Translation: 0x0409 0x04b0
ProductName: Project1
FileVersion: 1.00
ProductVersion: 1.00
InternalName: TJprojMain
OriginalFilename: TJprojMain.exe

Worm:Win32/Mofksys!pz also known as:

BkavW32.WatermarkHQc.PE
LionicTrojan.Win32.Agent.tnrh
Elasticmalicious (high confidence)
DrWebWin32.HLLP.Swisyn
MicroWorld-eScanWin32.Gosys.B
ClamAVWin.Trojan.VBGeneric-6735875-0
FireEyeGeneric.mg.74cf1db5f17f5af1
CAT-QuickHealW32.Mofksys.A4
SkyhighBehavesLike.Win32.Swisyn.cm
ALYacWin32.Gosys.B
Cylanceunsafe
ZillyaVirus.HLLP.Win32.1
SangforTrojan.Win32.Save.a
K7AntiVirusVirus ( 00579e181 )
AlibabaWorm:Win32/Mofksys.384
K7GWTrojan ( 0058e74a1 )
CrowdStrikewin/malicious_confidence_100% (W)
ArcabitWin32.Gosys.B
BitDefenderThetaAI:Packer.8B48C25620
VirITTrojan.Win32.Agent4.ALYU
SymantecW32.Gosys
tehtrisGeneric.Malware
ESET-NOD32Win32/VB.NBI
ZonerTrojan.Win32.88925
APEXMalicious
CynetMalicious (score: 100)
KasperskyVirus.Win32.VB.mz
BitDefenderWin32.Gosys.B
NANO-AntivirusTrojan.Win32.Swisyn.flhacn
AvastWin32:VB-OJQ [Wrm]
TencentWorm.Win32.Wbna.wf
TACHYONWorm/W32.VB-Mofksys.Zen
EmsisoftWin32.Gosys.B (B)
F-SecureTrojan.TR/Patched.Ren.Gen
BaiduWin32.Worm.VB.b
VIPREWin32.Gosys.B
TrendMicroPE_SWISB.A-O
Trapminemalicious.high.ml.score
SophosTroj/Agent-ABZF
SentinelOneStatic AI – Malicious PE
JiangminTrojan/Agent.hxgb
WebrootW32.Trojan.Gen
GoogleDetected
AviraTR/Patched.Ren.Gen
Antiy-AVLTrojan/Win32.Agent
Kingsoftmalware.kb.a.1000
XcitiumTrojWare.Win32.VB.QOTY@4qfd0g
MicrosoftWorm:Win32/Mofksys!pz
ZoneAlarmVirus.Win32.VB.mz
GDataWin32.Trojan.PSE1.1NLNP9O
VaristW32/Trojan.UEJO-9077
AhnLab-V3Worm/Win32.Mofksys.R198176
Acronissuspicious
McAfeeW32/Swisyn.b
MAXmalware (ai score=84)
VBA32TScope.Trojan.VB
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Spy.AT
TrendMicro-HouseCallPE_SWISB.A-O
RisingTrojan.Agent!1.6A70 (CLASSIC)
YandexTrojan.GenAsa!182yZo+3+DM
IkarusWorm.Mofksys
MaxSecureVirus.W32.Agent.xjgj
FortinetW32/VB.QCC!tr.dldr
AVGWin32:VB-OJQ [Wrm]
Cybereasonmalicious.cc2697
DeepInstinctMALICIOUS

How to remove Worm:Win32/Mofksys!pz?

Worm:Win32/Mofksys!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment