Threat Database Worms Worm:Win32/Vobfus.NI

Worm:Win32/Vobfus.NI

By LoneStar in Worms

Worm:Win32/Vobfus.NI is a worm that is distributed to victimized PCs via removable drives and network drives by copying itself. Worm:Win32/Vobfus.NI may also add and execute arbitrary files on the affected machine. Once installed, Worm:Win32/Vobfus.NI makes system modifications on the infected computer by making changes to the Windows Registry. Worm:Win32/Vobfus.NI also creates the registry entry so that it can load automatically whenever Windows is started. Worm:Win32/Vobfus.NI restricts Windows Explorer from showing hidden files and disables Automatic Updates. Worm:Win32/Vobfus.NI may contact an external server to check where it can drop other files.

SpyHunter Detects & Remove Worm:Win32/Vobfus.NI

File System Details

Worm:Win32/Vobfus.NI may create the following file(s):
# File Name MD5 Detections
1. file.exe 80c94b741ff389c947826fe7c6b18ea5 0
2. file.exe 459f441eca1c9184d8febd8e74297bef 0
3. file.exe 0ecb70cfd7331645123a991c61f51403 0
4. file.exe f8e012dcba7d33fa159b47209c806753 0
5. file.exe ced3426e37d838655f4fdd355a6ee305 0

Registry Details

Worm:Win32/Vobfus.NI may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU "NoAutoUpdate" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "vbxuin" = "%UserProfile%\vbxuin.exe /i"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = "0"

Trending

Most Viewed

Loading...