Worm

Worm:Win32/Vobfus!S removal guide

Malware Removal

The Worm:Win32/Vobfus!S is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm:Win32/Vobfus!S virus can do?

    Related domains:

    z.whorecord.xyz
    a.tomx.xyz

    How to determine Worm:Win32/Vobfus!S?

    
    

    File Info:

    crc32: 01F75C19
    md5: 7347d4144a29b1688aa94d1a29550cf0
    name: 7347D4144A29B1688AA94D1A29550CF0.mlw
    sha1: 55bfea44dc7f46b3bec91e882c4b3c1de34af8c0
    sha256: f8cb3918a9d580e95d56bae5ab7049125b3f72f18adf1dde39117d9f8d0b6822
    sha512: e6c652ccdc2b0ee0f643c1f0a7e8288e92f239afd3282e8dd2155092ab8e47acee21c7822f72d113eda5116033584b788fdd5d396bdf2320a5259a1d0877c02d
    ssdeep: 3072:DC1IrqF+gj2HsfyKnvmb7/D26zjlBvWlzPpsPfIQ8sqLELTS55pMzcUK1zUyGeQ:EF+1Knvmb7/D26zjlBvWhPpsPfIQ8sqK
    type: PE32 executable (GUI) Intel 80386, for MS Windows

    Version Info:

    d: g

    Worm:Win32/Vobfus!S also known as:

    Elasticmalicious (high confidence)
    MicroWorld-eScanTrojan.GenericKD.6012607
    FireEyeGeneric.mg.7347d4144a29b168
    McAfeeTrojan-FAEH!7347D4144A29
    AegisLabVirus.Win32.Virut.lowa
    SangforMalware
    BitDefenderTrojan.GenericKD.6012607
    Cybereasonmalicious.44a29b
    BaiduWin32.Worm.Autorun.l
    CyrenW32/Damaged_File.E.gen!Eldorado
    SymantecW32.Changeup
    APEXMalicious
    AvastWin32:VB-YZH [Trj]
    ClamAVWin.Packer.VBCrypt-5731561-0
    AlibabaWorm:Win32/Vobfus.c0576cdc
    RisingWorm.VobfusEx!1.99DC (CLOUD)
    Ad-AwareTrojan.GenericKD.6012607
    SophosMal/Generic-S
    ComodoHeur.Corrupt.PE@1z141z3
    F-SecureTrojan.TR/Diple.cdzya
    DrWebTrojan.VbCrypt.60
    VIPRETrojan.Win32.Generic.pak!cobra
    TrendMicroTROJ_GEN.R002C0CB321
    McAfee-GW-EditionBehavesLike.Win32.VBObfus.cm
    EmsisoftTrojan.GenericKD.6012607 (B)
    IkarusTrojan.Win32.Diple
    AviraTR/Diple.cdzya
    MAXmalware (ai score=98)
    Antiy-AVLTrojan/Win32.TSGeneric
    MicrosoftWorm:Win32/Vobfus.gen!S
    GridinsoftTrojan.Win32.Downloader.oa
    ArcabitTrojan.Generic.D5BBEBF
    SUPERAntiSpywareTrojan.Agent/Gen-Vobfus
    GDataTrojan.GenericKD.6012607
    CynetMalicious (score: 100)
    AhnLab-V3Trojan/Win32.Diple.R19413
    Acronissuspicious
    ALYacTrojan.GenericKD.6012607
    MalwarebytesMalware.AI.2383759862
    PandaTrj/GdSda.A
    ESET-NOD32a variant of Win32/AutoRun.VB.AQE
    TrendMicro-HouseCallTROJ_GEN.R002C0CB321
    TencentMalware.Win32.Gencirc.114bd2ae
    YandexTrojan.GenAsa!lvvQnsYCqGY
    SentinelOneStatic AI – Malicious PE – Worm
    FortinetW32/Diple.ZMH2!tr
    AVGWin32:VB-YZH [Trj]
    Paloaltogeneric.ml
    CrowdStrikewin/malicious_confidence_100% (D)
    Qihoo-360Win32/Trojan.89e

    How to remove Worm:Win32/Vobfus!S?

    Worm:Win32/Vobfus!S removal tool
    • Download and install GridinSoft Anti-Malware.
    • Open GridinSoft Anti-Malware and perform a “Standard scan“.
    • Move to quarantine” all items.
    • Open “Tools” tab – Press “Reset Browser Settings“.
    • Select proper browser and options – Click “Reset”.
    • Restart your computer.

    About the author

    Paul Valéry

    I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

    Leave a Comment