W32/Vobfus-BG

Category: Viruses and Spyware Protection available since:08 Jan 2013 19:57:00 (GMT)
Type: Win32 worm Last Updated:08 Jan 2013 19:57:00 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/Vobfus-BG exhibits the following characteristics:

File Information

Size
256K
SHA-1
01d0a96c442a2d0e8ed8e4374e5f47251e2a8656
MD5
c128fab96e8850177add1cb5bbc3a3ba
CRC-32
97aa32db
File type
Windows executable
First seen
2013-01-01

Runtime Analysis

Registry Keys Created
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run
    foaju
    c:\Documents and Settings\test user\foaju.exe /h
  • HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    NoAutoUpdate
    0x00000001
Registry Keys Modified
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
    ShowSuperHidden
    0x00000000
DNS Requests
  • ns1.helpchecks.com

download Try Sophos products for free
Download now