Worm:Win32/Vobfus!mclg removal

The Worm:Win32/Vobfus!mclg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Worm:Win32/Vobfus!mclg virus can do?

Executable code extraction
Network activity detected but not expressed in API logs

How to determine Worm:Win32/Vobfus!mclg?


File Info:
crc32: 68A745BF
md5: d7f008c568e16775553c1a8cda846035
name: D7F008C568E16775553C1A8CDA846035.mlw
sha1: ad14a5010c19297ced8e1a4b733dc95b85bcf06c
sha256: 345a8e61e6d31168dd7a7cca1fe1d5e668f7de438ee91ec6d0b0125b6be2b17a
sha512: 62cad4caf08cac97e9d10385724168656955a42d004be4e369802b8fe5632f4c75c46cd4509fbff5ad3e4b45a1361007c7696fd02d2abe82cd2dcea40d20f371
ssdeep: 24576:nAih0ja7vBCQtiuGGMlOf4oyZ5YYpChz515YOMn/fxb/uqU6:QQtirGMlOsszTqxn/fxLs6
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x040c 0x04b0
InternalName: imgtool
FileVersion: 1.11.0005
ProductName: ImgTool
ProductVersion: 1.11.0005
FileDescription: ImgTool
OriginalFilename: imgtool.exe

Worm:Win32/Vobfus!mclg also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Lionic	Trojan.Win32.Graftor.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
Cylance	Unsafe
Alibaba	TrojanDropper:Win32/Generic.f675c02a
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.568e16
Cyren	W32/VBKrypt.WT.gen!Eldorado
Symantec	Trojan.Gen.2
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	UDS:Worm.Win32.WBVB
Sophos	Generic Reputation PUA (PUA)
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R007C0DGG21
McAfee-GW-Edition	BehavesLike.Win32.Trojan.tm
Avira	TR/Dropper.Gen8
Microsoft	Worm:Win32/Vobfus!mclg
AhnLab-V3	Trojan/Win.Generic.R427523
McAfee	Artemis!D7F008C568E1
VBA32	BScope.Trojan.Wacatac
Malwarebytes	Malware.AI.2067774598
Panda	PUP/Generic
TrendMicro-HouseCall	TROJ_GEN.R007C0DGG21
Yandex	Trojan.DR.Agent!l2fyAenQXHI
Ikarus	Trojan.Dropper
MaxSecure	Trojan.Malware.118713053.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Worm:Win32/Vobfus!mclg?

Worm:Win32/Vobfus!mclg removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X