It establishes connections with Chinese websites, from which it attempts to download malicious files. It spreads through removable drives, like USB keys, making copies of itself in them.

Windows 2003/XP/2000/NT/ME/98/95

Vobfus.A is a worm which establishes connections with Chinese websites, from which it attempts to download files, among them, some belonging to an adware program.

In order to do so, it loads the character packets belonging to Japanese, Chinese and Korean, so that the system could interpret these languages. This could allow the worm to download malicious files from websites in any of these languages without any problem and even redirect users to malicious websites.

Vobfus.A spreads through removable drives, like USB keys, making copies of itself in them.

Vobfus.A is difficult to recognize, as it does not display any messages or warnings that indicate it has reached the computer.

However, when Vobfus.A spreads through removable drives, like USB keys, it will create several shortcuts which actually point to a copy of the worm.

The names it uses for the shortcuts are similar to those of the usual Window folders, like Music, Pictures or Video, among tohers.

The following image belongs to what the user will view when accessing the removable drives: