Worm:Win32/Vobfus.NI
Worm:Win32/Vobfus.NI is a worm that is distributed to victimized PCs via removable drives and network drives by copying itself. Worm:Win32/Vobfus.NI may also add and execute arbitrary files on the affected machine. Once installed, Worm:Win32/Vobfus.NI makes system modifications on the infected computer by making changes to the Windows Registry. Worm:Win32/Vobfus.NI also creates the registry entry so that it can load automatically whenever Windows is started. Worm:Win32/Vobfus.NI restricts Windows Explorer from showing hidden files and disables Automatic Updates. Worm:Win32/Vobfus.NI may contact an external server to check where it can drop other files.
Table of Contents
SpyHunter Detects & Remove Worm:Win32/Vobfus.NI
File System Details
Worm:Win32/Vobfus.NI may create the following file(s):
# | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
---|---|---|---|
1. | file.exe | 80c94b741ff389c947826fe7c6b18ea5 | 0 |
2. | file.exe | 459f441eca1c9184d8febd8e74297bef | 0 |
3. | file.exe | 0ecb70cfd7331645123a991c61f51403 | 0 |
4. | file.exe | f8e012dcba7d33fa159b47209c806753 | 0 |
5. | file.exe | ced3426e37d838655f4fdd355a6ee305 | 0 |
Registry Details
Worm:Win32/Vobfus.NI may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU "NoAutoUpdate" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "vbxuin" = "%UserProfile%\vbxuin.exe /i"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = "0"
Submit Comment
Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.