Worm:Win32/Vobfus.CF removal guide

Malware Removal

The Worm:Win32/Vobfus.CF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Worm:Win32/Vobfus.CF virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Expresses interest in specific running processes
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Creates a slightly modified copy of itself
  • Anomalous binary characteristics
  • Attempts to modify Explorer settings to prevent hidden files from being displayed

Related domains:

ns1.player1532.com
ns1.videoall.org
ns1.videoall.net

How to determine Worm:Win32/Vobfus.CF?


File Info:

crc32: 920FCE1C
md5: 14de51a97f84814b5fa34639eef7fb43
name: 14DE51A97F84814B5FA34639EEF7FB43.mlw
sha1: 22038cf976e93767c0bf5b698c067a516912c10a
sha256: 62c56e3c2735a7b6438475a733441f46230fc431b2d8268b4b691814776e56ed
sha512: 8b2d318f49ee12c6e8c12831b3572159cb3544ffdb960c82412d17398f70609b9d3c41ce00e7686c94f9c675365c14d2242358d057c850c4ea930b9e6722f776
ssdeep: 6144:VYQ/4u8Cjcm6HgId+7UDiKk7Wr5fxcq5dQeBACpmUjrgUBDlc7WsUzem2K2wJrN:/Qu8cc3HgI87IiKk7Wr5Jc6gUcWsUil
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
ProductVersion: 1.00
InternalName: MSNUWMfJonraOpqcoq
FileVersion: 1.00
OriginalFilename: MSNUWMfJonraOpqcoq.exe
ProductName: SSQydnMidm

Worm:Win32/Vobfus.CF also known as:

BkavW32.AIDetect.malware2
K7AntiVirusEmailWorm ( 0054d10f1 )
LionicWorm.Win32.WBNA.o!c
Elasticmalicious (high confidence)
DrWebWin32.HLLW.Autoruner1.41577
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Vobfus.gen
ALYacTrojan.Ransomware.GenericKDS.41905174
CylanceUnsafe
SangforWin.Trojan.Changeup-6169544-0
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaWorm:Win32/Vobfus.f8fb8ef6
K7GWEmailWorm ( 0054d10f1 )
Cybereasonmalicious.97f848
BaiduWin32.Worm.Autorun.l
CyrenW32/S-7baeb806!Eldorado
SymantecW32.Changeup!gen35
ESET-NOD32Win32/AutoRun.VB.AGC
APEXMalicious
AvastWin32:VB-TWR [Trj]
ClamAVWin.Trojan.Changeup-6169544-0
KasperskyWorm.Win32.WBNA.ipa
BitDefenderTrojan.Ransomware.GenericKDS.41905174
NANO-AntivirusTrojan.Win32.Jorik.covjts
ViRobotWorm.Win32.A.WBNA.253952.CCB
MicroWorld-eScanTrojan.Ransomware.GenericKDS.41905174
TencentMalware.Win32.Gencirc.10ba584f
Ad-AwareTrojan.Ransomware.GenericKDS.41905174
SophosML/PE-A + Mal/SillyFDC-N
BitDefenderThetaAI:Packer.6BB27F7120
VIPRETrojan.Win32.Vobfus.gen (v)
TrendMicroWORM_VBKRYP.SMLZ
McAfee-GW-EditionBehavesLike.Win32.VBObfus.dm
FireEyeGeneric.mg.14de51a97f84814b
EmsisoftTrojan.Ransomware.GenericKDS.41905174 (B)
SentinelOneStatic AI – Malicious PE
JiangminWorm.WBNA.gxqo
AviraWORM/Vobfus.CF.33
Antiy-AVLTrojan/Generic.ASBOL.5
MicrosoftWorm:Win32/Vobfus.CF
SUPERAntiSpywareTrojan.Agent/Gen-VBan[SSI]
ZoneAlarmWorm.Win32.WBNA.ipa
GDataTrojan.Ransomware.GenericKDS.41905174
AhnLab-V3Trojan/Win32.VBKrypt.R11602
Acronissuspicious
McAfeeVBObfus.n
MAXmalware (ai score=85)
VBA32BScope.Trojan.Diple
MalwarebytesMalware.AI.2334462872
PandaW32/Vobfus.GEP
TrendMicro-HouseCallWORM_VBKRYP.SMLZ
RisingTrojan.Win32.VBCode.fng (CLASSIC)
YandexTrojan.GenAsa!jYCisSON31U
IkarusWorm.Win32.Vobfus
FortinetW32/VB.ADV!tr
AVGWin32:VB-TWR [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Worm.Vobfus.HwMAEpsA

How to remove Worm:Win32/Vobfus.CF?

Worm:Win32/Vobfus.CF removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment