• We hope you have a fantastic holiday season to close out 2025! Thank you all so much for being part of the Tom's Guide community!

Conficker and vobfus at the same time

lights0123

Estimable
Jul 4, 2015
2
0
4,510
I was just working on my computer when my AV (Avira) popped up with:
F:\cbteor.exe
[DETECTION] Contains recognition pattern of the WORM/Vobfus.F worm
Begin scan in 'F:\cbteor.scr'
F:\cbteor.scr
[DETECTION] Contains recognition pattern of the WORM/Vobfus.F worm
I investigated it, and I noticed those two files. I checked for other instances of it, but I didn't find anything. Also, I noticed that the autorun.inf in there was 57KB, but didn't really notice it. 15 seconds later, my AV popped up with:
F:\autorun.inf
[DETECTION] Contains recognition pattern of the WORM/Conficker.Autorun.Gen worm
I opened up autorun.inf, and there was a lot of random binary. I read this page. I was thinking that I had something like it, until I realized that it said
Open=RUNDLL32.EXE .\RECYCLER\jwgvsq.vmx
I had that same file, except for in RECYCLER, I had a folder with some random numbers, and then jwgvsq.vmx. I use Windows 8.1 and the only things I've installed recently are hfsexplorer and MiniTool Partition Wizard. Here's what I'm wondering:

  • ■ Why is this happening only in my flash drive?
    ■ Why is Conficker appearing in 2015?
 
Depends. What else was the flash drive plugged into?? Besides your PC?

Looks like thats how both of them spread. On removable disks.


 
I left my flash drive for 1 week in my computer while I was away. When I came back, that appeared. Other than that, there was no other removable media, and no one used my flash drive. Also, those processes were never running on my computer and I could not find any other traces of them.