Worm:Win32/Vobfus.SO

Worm:Win32/Vobfus.SO is a worm that proliferates via removable drives and network drives. Worm:Win32/Vobfus.SO may also drop and execute arbitrary files. Once run, Worm:Win32/Vobfus.SO creates a copy of itself to the specific locations. Worm:Win32/Vobfus.SO creates the malevolent files on a corrupted PC. Worm:Win32/Vobfus.SO may also set an 'autorun.inf' file in the root directory of the targeted drive. Such 'autorun.inf files' carry execution commands for the OS, so that when the removable drive is accessed from another PC, which supports the Autorun feature, Worm:Win32/Vobfus.SO is launched automatically. Worm:Win32/Vobfus.SO may contact a remote host at Ns1.boxonline1.com using port 7001. Typically, Worm:Win32/Vobfus.SO may contact a remote host to download and execute arbitrary files (incorporating updates or other malware infections), to report a new infection to its creator, to upload data taken from the attacked PC, to receive configuration or other data and to receive commands from a remote attacker.