HackTool:JS/Revobfoos.D (file analysis)

The HackTool:JS/Revobfoos.D is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What HackTool:JS/Revobfoos.D virus can do?

Injection (inter-process)
Uses Windows utilities for basic functionality
A potential decoy document was displayed to the user
Network activity detected but not expressed in API logs

How to determine HackTool:JS/Revobfoos.D?


File Info:
crc32: F8BA9710
md5: c171bcd34151cbcd48edbce13796e0ed
name: upload_file
sha1: 2770fec86275dfb1a4a05e2d56bc27a089197666
sha256: 63ba6db8c81c60dd9f1a0c7c4a4c51e2e56883f063509ed7b543ad7651fd8806
sha512: d25cbb70dae9bcc49d32c15300734879fe4c1b7ae35cb5affab50e8a61ae7226832b278d846f76f7eedc3a1baf35e2aec4e8c364eab99cddb00c2ffeb97283da
ssdeep: 12288:mCPioPTJd1WR3keV2Y/eHKaetuMUDfyTEHG+oIr7zOHSh3qruJJvbW:mxYTJw3keV2Y/xSMWPpoI7vh3qV
type: ASCII text, with CRLF line terminators

Version Info:
0: [No Data]

HackTool:JS/Revobfoos.D also known as:

MicroWorld-eScan	Trojan.Agent.EXDR
FireEye	Trojan.Agent.EXDR
AegisLab	Trojan.PowerShell.Agent.j!c
TrendMicro	Trojan.PS1.SUNCRYPT.THJOHBO
Cyren	Trojan.NAWA-18
Symantec	Trojan Horse
TrendMicro-HouseCall	Trojan.PS1.SUNCRYPT.THJOHBO
Kaspersky	Trojan-Ransom.PowerShell.Agent.z
BitDefender	Trojan.Agent.EXDR
Ad-Aware	Trojan.Agent.EXDR
Comodo	Malware@#3bmn3k3osq3ke
DrWeb	Trojan.Encoder.32676
Emsisoft	Trojan.Agent.EXDR (B)
Microsoft	HackTool:JS/Revobfoos.D
Arcabit	Trojan.Agent.EXDR
ZoneAlarm	Trojan-Ransom.PowerShell.Agent.z
GData	Trojan.Agent.EXDR
ALYac	Trojan.Ransom.Filecoder
MAX	malware (ai score=100)
Ikarus	Trojan-Ransom.Rokku
AVG	Other:Malware-gen [Trj]
Qihoo-360	virus.powershell.qexvmc.1

How to remove HackTool:JS/Revobfoos.D?

HackTool:JS/Revobfoos.D removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X