Worm.Orbina!rts
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Popularity Rank: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Threat Level: | 50 % (Medium) |
| Infected Computers: | 107 |
| First Seen: | December 1, 2010 |
| Last Seen: | November 23, 2022 |
| OS(es) Affected: | Windows |
The detection of Worm.Orbina!rts indicates that your system has been compromised by a malicious worm. This type of malware is designed to replicate and spread to other systems, causing damage and disrupting normal computer operation. It is essential to take immediate action to remove the worm and prevent further harm.
Table of Contents
What Is Worm.Orbina!rts?
Worm.Orbina!rts is a type of malware that can infect a computer system without the need for user interaction. It can spread through various means, including exploited vulnerabilities, infected software downloads, and infected external devices. The worm can modify system settings, steal sensitive information, and create backdoors for remote access. Understanding the nature of this threat is crucial in taking effective measures to remove it and prevent future infections.
How Worm.Orbina!rts Operates
Once Worm.Orbina!rts infects a system, it can operate in various ways, including modifying system files, creating new files and folders, and changing registry settings. It can also connect to remote servers to download additional malware or receive instructions from its creators. The worm can use different techniques to evade detection, such as code obfuscation and anti-debugging methods. Its primary goal is to maintain a persistent presence on the infected system and use it as a base for further malicious activities.
Symptoms of Infection
Systems infected with Worm.Orbina!rts may exhibit various symptoms, including slow system performance, frequent crashes, and unfamiliar programs or files. Users may also notice unusual network activity, such as increased data usage or unfamiliar connections. In some cases, the worm may display fake error messages or alerts to trick users into installing additional malware or providing sensitive information. It is essential to be aware of these symptoms and take prompt action if they are observed.
How to Remove Worm.Orbina!rts
- Boot your system in Safe Mode with Networking to prevent the worm from loading and to allow for internet access. This will make it easier to download and install removal tools.
- Perform a full scan of your system using a reputable anti-malware tool, such as SpyHunter. This will help detect and remove the worm and any associated malware.
- Uninstall any suspicious programs or applications that may be related to the infection. Be cautious when removing programs, as some may be legitimate or required by your system.
- Reset your web browsers, including Chrome, Firefox, and Edge, to their default settings. This will help remove any malicious extensions or settings that may have been installed by the worm.
- Reboot your system and perform another full scan to ensure that the worm and any associated malware have been completely removed.
Conclusion
Removing Worm.Orbina!rts requires careful attention to detail and a thorough understanding of the malware removal process. By following the steps outlined above and using reputable anti-malware tools, you can effectively remove the worm and prevent future infections. It is also essential to maintain good security practices, such as regularly updating your operating system and software, using strong passwords, and being cautious when opening email attachments or downloading files from the internet. By taking these precautions, you can help protect your system from malware and other online threats.
Aliases
15 security vendors flagged this file as malicious.
| Antivirus Vendor | Detection |
|---|---|
| Panda | W32/Spybot.AA |
| AVG | Downloader.Generic9.IVQ |
| Fortinet | W32/AutoRun.GOR!worm |
| AhnLab-V3 | Worm/Win32.AutoRun |
| AntiVir | Worm/Autorun.gor |
| Comodo | Worm.Win32.AutoRun.~jfs |
| Kaspersky | Worm.Win32.AutoRun.gor |
| ClamAV | PUA.Win32.Packer.Armadillo-93 |
| eSafe | Win32.WormAutorun.Go |
| Avast | Win32:AutoRun-BFK [Wrm] |
| NOD32 | a variant of Win32/AutoRun.Agent.TQ |
| McAfee | Artemis!B1DC86B9274E |
| Panda | Trj/CI.A |
| AVG | Suspicion: unknown virus |
| Fortinet | W32/Autorun.ZF!worm |
File System Details
| # | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|---|
| 1. | 6to4ex.dll | d146d73e4e15fa8f126750abe2d93db9 | 29 |
| 2. | keygen.exe | f8d83698c605a150c6bbbd25a9529cd6 | 21 |
| 3. | windows.exe | 26db049a3bc2a611e8afa051df6266a4 | 8 |
| 4. | HexDec.exe | e75ec7e93354e49ba7f312efae14f0d8 | 5 |
| 5. | appdata.exe | 555be67dc1deed4e8d73c45b16325295 | 4 |
| 6. | oem1189889441L.exe | 84cb8691aa81b9c39d5b0de8f280170b | 3 |
| 7. | FIFA 10 support.exe | 8bb89c9281fa63b70caa0105ad014a93 | 2 |
| 8. | Plugin[1].EXE | baca140662f1af77d396803705206d12 | 2 |
| 9. | algv.exe | b1dc86b9274e9a69f558a8d434498e53 | 2 |
| 10. | MsMxEng.exe | 878db6b86461f5272643b38b19566034 | 1 |
| 11. | chdcbl.xyz.exe | 0b6598ce4f6fa1d3c22afcc95ac79451 | 1 |
| 12. | Start.exe | e9659a019225f7a98e538c636f513f49 | 1 |
| 13. | Javax.exe | 59d280bb7e5fd5d9f74d2bc3b5b33773 | 1 |
| 14. | update.exe | 28a8958cb0b0065393aa20995ba741df | 1 |