Skip to main content
Skip to main content
Microsoft Security Intelligence
51 entries found. Displaying page 3 of 3.
Updated on Nov 07, 2011

Worm:Win32/Vobfus.gen!N is the generic detection for obfuscated Visual Basic (VB)-compiled malware that spread via removable drives and download additional malware from remote servers.

Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Koobface.P is a worm that spreads by posting messages, containing a link to the worm, to the pages of other contacts on social network sites such as Facebook. This variant of Koobface may arrive posing as an installer for the Internet communications application "Skype".
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Vobfus.U is a detection of obfuscated Visual Basic (VB) complied malware that spreads via removable drives and downloads additional malware from remote servers.
Alert level: severe
Updated on Jan 03, 2012

Worm:Win32/Vobfus.gen!O is an obfuscated worm created in Visual Basic (VB), that spreads via removable drives and downloads additional malware from remote servers.

Alert level: severe
Updated on Feb 09, 2012

Worm:Win32/Vobfus.gen!S is the generic detection for obfuscated Visual Basic (VB)-compiled malware that spread via removable drives and download additional malware from remote servers.

Alert level: severe
Updated on Mar 28, 2012

Worm:Win32/Vobfus.gen!T is a generic detection for obfuscated Visual Basic (VB)-compiled malware that spreads via removable drives, and downloads additional malware from remote servers.

Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Vobfus.S is a detection of obfuscated Visual Basic (VB) complied malware that spreads via removable drives and downloads additional malware from remote servers.
Alert level: severe
Updated on Apr 11, 2011
Win32/FakeRemoc is a family of trojans that claim to scan for malware and display fake warnings of “malicious programs and viruses”. They inform the user that they need to pay money to register the software in order to remove these non-existent threats. These trojans may subvert an affected user's web activity, or attempt to download other malware, such as Trojan:Win32/Hiloti. They may also display dialogs that mimic the Windows Security Center.
 
Special Note:
Reports of Rogue Antivirus programs have been more prevalent as of late.  These are programs that generate misleading alerts and false detections in order to convince users to purchase illegitimate security software.  Some of these programs may display product names or logos in an apparently unlawful attempt to impersonate Microsoft products. 
 
To detect and remove this threat and other malicious software that may be installed in your computer, run a full-system scan with an up-to-date antivirus product such as the following:
 
 
For more information on antivirus software, see http://www.microsoft.com/windows/antivirus-partners/.
Alert level: severe
Updated on Oct 02, 2014

Microsoft security software detects and removes this family of threats.

This family of worms can download other malware onto your PC, including:

Vobfus worms can be downloaded by other malware or spread via removable drives, such as USB flash drives.

Find out ways that malware can get on your PC.  

Alert level: severe
Updated on Jul 26, 2015
Microsoft security software detects and removes this worm.
 
Worm:Win32/Koobface is a worm that spreads by posting messages, containing a link to the worm, to the pages of other contacts on social network sites such as Facebook.com.
The worm can download and run other malware that could include updates of the worm.
The worm can also display pop-up messages or windows that attempt to lure users to install rogue security software.
 
Alert level: severe
Updated on Aug 06, 2014

Windows Defender detects and removes this threat.

This family of rogue security programs pretend to scan your PC for malware, and often report lots of infections. The program will say you have to pay for it before it can fully clean your PC.

However, the program hasn't really detected any malware at all and isn't really an antivirus or antimalware scanner. It just looks like one so you'll send money to the people who made the program. Some of these programs use product names or logos that unlawfully impersonate Microsoft products.

Even if you do pay to "unlock" the app, it won't do anything because your PC isn't actually infected with all that malware it "found".

Different brands of the rogues may modify various settings on your computer, end or close programs or system services, or block access to websites.

Find out ways that malware can get on your PC.

Alert level: severe