About “Application.Tool.Avpx.B” infection

The Application.Tool.Avpx.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.Tool.Avpx.B virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Application.Tool.Avpx.B?


File Info:
name: B93D284C386FCBC80ACB.mlw
path: /opt/CAPEv2/storage/binaries/b7ca13a30a3dc951a52573d3de0f2b050b2c05462faae2465d703eecca095233
crc32: 3F0EA345
md5: b93d284c386fcbc80acb5b65ef4fbbd6
sha1: fc93c7542a535b9471b0ff1cd92b9d1c5a953717
sha256: b7ca13a30a3dc951a52573d3de0f2b050b2c05462faae2465d703eecca095233
sha512: 08532d01a66790efa9915b49469da6faf920e2ccc48fb1abd7572339180e7941140dd11fc4c8ee5f006315e410b9f611da4cb5b9c700e18a8afccf5172b4be78
ssdeep: 1536:a7/ORBwU3MZaEvpx097pg2nDhGmnJKl3isxc5VXSVmNxo2G8G9YM5me:g2RBwU3MZtpO922nDNglmVVyAM8e
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T14E939D02B5E2D175F04480724A7D2BF39B7DD9246202522BF3D9A5A8DFB45D0EB0A39F
sha3_384: 4af5e684723a95ba09bb6f8316523a40a8a99df7037df995a5d06ad3dfc2224e933f8a5ca4234af74ba8bb2b17a64e59
ep_bytes: eb1066623a432b2b484f4f4b90e94011
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Application.Tool.Avpx.B also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
Skyhigh	BehavesLike.Win32.PWSZbot.nh
ALYac	Application.Tool.Avpx.B
Cylance	unsafe
BitDefender	Application.Tool.Avpx.B
Arcabit	Application.Tool.Avpx.B
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
NANO-Antivirus	Trojan.Win32.AVPX.czzldx
MicroWorld-eScan	Application.Tool.Avpx.B
Sophos	Generic ML PUA (PUA)
VIPRE	Application.Tool.Avpx.B
TrendMicro	HKTL_AVPX.B
Trapmine	suspicious.low.ml.score
FireEye	Application.Tool.Avpx.B
Emsisoft	Application.Tool.Avpx.B (B)
Jiangmin	Trojan/Agent.gei
Webroot	W32.Malware.Gen
Xcitium	Malware@#2vre1cwgg2diy
Microsoft	Trojan:Win32/DSSDetection
GData	Application.Tool.Avpx.B
McAfee	Tool-AVPX
MAX	malware (ai score=99)
DeepInstinct	MALICIOUS
Malwarebytes	Generic.Malware/Suspicious
Panda	Generic Malware
TrendMicro-HouseCall	HKTL_AVPX.B
Rising	Hack.Win32.AVPX.a (CLASSIC)
Fortinet	Riskware/Avpx
BitDefenderTheta	Gen:NN.ZexaE.36792.fGW@aSqC7Z
AVG	Win32:Trojan-gen
Avast	Win32:Trojan-gen

How to remove Application.Tool.Avpx.B?

Application.Tool.Avpx.B removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X