Categories: Worm

What is “Worm:Win32/Vobfus.LZ”?

The Worm:Win32/Vobfus.LZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Worm:Win32/Vobfus.LZ virus can do?

Executable code extraction
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Worm:Win32/Vobfus.LZ?


File Info:
crc32: C97D901Bmd5: ba9e42dd048a71c21b4b32d0a08cc358name: BA9E42DD048A71C21B4B32D0A08CC358.mlwsha1: f6013b65cb7af5c33297a99acc246091834ad4f7sha256: bfe90a3c3c0a837e06ab6242f14ab706adb28e22cc79877bad616e1d38cfd72bsha512: 6e45aae43307943f1e6bf6f4616c94703eef041e17f14cb9b1a734281fa8805aa21ce8abd4e3e02328d107bc7e3f0ba3d45c28d9fbc9891f514728a1639b81d6ssdeep: 6144:3aRvu2WMyjz81jAi349syfYvXcVUEu2IqHaNb8lj4:K5u2WdMn3WfQvCHSYl8type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0409 0x04b0InternalName: charbonFileVersion: 8.53CompanyName: 009ProductName: ClittorProductVersion: 8.53OriginalFilename: charbon.exe

Worm:Win32/Vobfus.LZ also known as:

Bkav	HW32.Packed.
K7AntiVirus	Trojan ( 005640b91 )
DrWeb	Win32.HLLW.Autoruner1.30125
MicroWorld-eScan	Gen:Variant.Razy.456582
CMC	Worm.Win32.Vobfus!O
CAT-QuickHeal	Trojan.Beebone.D
ALYac	Gen:Variant.Razy.456582
Cylance	Unsafe
Zillya	Worm.WBNAGen.Win32.26
Sangfor	Malware
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Worm:Win32/Vobfus.d875bdcc
K7GW	Trojan ( 005640b91 )
Cybereason	malicious.d048a7
TrendMicro	WORM_VOBFUS.SMIS
Cyren	W32/Vobfus.BI.gen!Eldorado
Symantec	W32.Changeup!gen22
ESET-NOD32	Win32/VBObfus.SK
Zoner	Trojan.Win32.82427
APEX	Malicious
TotalDefense	Win32/VBDoc.A!generic
Avast	Win32:VB-AFDO [Trj]
ClamAV	Win.Worm.Vobfus-6823593-0
GData	Gen:Variant.Razy.456582
Kaspersky	Worm.Win32.WBNA.ipa
BitDefender	Gen:Variant.Razy.456582
NANO-Antivirus	Trojan.Win32.Vobfus.fsfxee
ViRobot	Worm.Win32.A.VBNA.200704.AQ
SUPERAntiSpyware	Trojan.Agent/Gen-Vban
Tencent	Malware.Win32.Gencirc.10b58696
Ad-Aware	Gen:Variant.Razy.456582
Sophos	W32/VBNA-U
Comodo	TrojWare.Win32.VB.ISCI@4snddz
F-Secure	Worm.WORM/Conficker.AT
BitDefenderTheta	Gen:NN.ZevbaF.34110.ym3@aG@Mwgci
VIPRE	Worm.Win32.VBNA.bb (v)
Invincea	heuristic
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.ba9e42dd048a71c2
Emsisoft	Gen:Variant.Razy.456582 (B)
SentinelOne	DFI – Malicious PE
F-Prot	W32/Vobfus.BI.gen!Eldorado
Endgame	malicious (high confidence)
Webroot	W32.Trojan.Gen
Avira	WORM/Conficker.AT
Antiy-AVL	Worm/Win32.WBNA.gen
Microsoft	Worm:Win32/Vobfus.LZ
Jiangmin	Worm/VBNA.gxdy
Arcabit	Trojan.Razy.D6F786
AegisLab	Worm.Win32.WBNA.lEIg
ZoneAlarm	Worm.Win32.WBNA.ipa
AhnLab-V3	Worm/Win32.VBNA.R123347
Acronis	suspicious
McAfee	VBObfus.ey
MAX	malware (ai score=80)
VBA32	TScope.Trojan.VB
Malwarebytes	Worm.Vobfus
Panda	W32/Vobfus.gen.worm
TrendMicro-HouseCall	WORM_VOBFUS.SMIS
Rising	Trojan.Vobfus!1.BAE4 (CLOUD)
Ikarus	Trojan.Win32.VBObfus
MaxSecure	Win.MxResIcn.Heur.Gen
Fortinet	W32/WBNA.IPA!worm
AVG	Win32:VB-AFDO [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Worm.3d4