How to remove "TrojanDownloader:O97M/Obfuse.PXR!MTB"?

The TrojanDownloader:O97M/Obfuse.PXR!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:O97M/Obfuse.PXR!MTB virus can do?

Injection (inter-process)
Injection with CreateRemoteThread in a remote process
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine TrojanDownloader:O97M/Obfuse.PXR!MTB?


File Info:
crc32: F581BDFD
md5: daea44be59abc7fb93789c9ec9535bdf
name: upload_file
sha1: cddfa3986d6bbe84d4b849b3d681bae5377de81d
sha256: 93727c5cfbe727e43f0644f888fddb03c4f5728f82c74952981691f09de44642
sha512: 361caf9960a24b831968935337eb9b191fabab697697b3e6240f2fcaa1be0c4f4826ad279ebc0b655b2a2b7c7030b3f6c6cc020c2461153c69564c6abf2497fc
ssdeep: 6144:Kk3hOdsylKlgryzc4bNhZF+E+W2knF+AqmFkM9lz2KE8hBdLVoo5z9Nn/FDC5GV:V5kMHq/8oo5ztOcVLEP9iYtHliEM9fG
type: Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 1252, Author: DELL, Last Saved By: DELL, Create Time/Date: Thu Aug 13 00:22:51 2020, Last Saved Time/Date: Thu Aug 13 00:22:51 2020, Security: 0

Version Info:
0: [No Data]

TrojanDownloader:O97M/Obfuse.PXR!MTB also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.34352218
FireEye	Trojan.GenericKD.34352218
McAfee	RDN/Generic Downloader.x
AegisLab	Trojan.MSExcel.Generic.4!c
Sangfor	Malware
Symantec	Trojan.Gen.2
Avast	SNH:Script [Dropper]
ClamAV	Xls.Dropper.Agent-9317203-0
Kaspersky	HEUR:Trojan-Downloader.MSOffice.SLoad.gen
BitDefender	Trojan.GenericKD.34352218
ViRobot	XLS.Z.Agent.389120.G
Rising	Downloader.Agent/VBA!1.C970 (CLASSIC)
Ad-Aware	Trojan.GenericKD.34352218
F-Secure	Malware.VBA/Dldr.Agent.ylbmu
DrWeb	Exploit.Siggen2.17439
Fortinet	VBA/Agent.GAK!tr.dldr
Sophos	Troj/DocDl-AABN
Ikarus	Trojan-Downloader.VBA.Agent
Avira	VBA/Dldr.Agent.ylbmu
Antiy-AVL	Trojan[Downloader]/MSOffice.Agent.txv
Arcabit	HEUR.VBA.Trojan.d
ZoneAlarm	HEUR:Trojan-Downloader.MSOffice.SLoad.gen
Microsoft	TrojanDownloader:O97M/Obfuse.PXR!MTB
Cynet	Malicious (score: 85)
ALYac	Trojan.GenericKD.34352218
TACHYON	Suspicious/X97M.Downloader.Gen
Zoner	Probably Heur.W97Obfuscated
ESET-NOD32	VBA/TrojanDownloader.Agent.TXV
Tencent	Heur.Macro.Generic.e.aaa7fb6f
SentinelOne	DFI – Suspicious OLE
GData	Trojan.GenericKD.34352218
AVG	SNH:Script [Dropper]
Qihoo-360	Generic/Trojan.Downloader.3f4

How to remove TrojanDownloader:O97M/Obfuse.PXR!MTB?

TrojanDownloader:O97M/Obfuse.PXR!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

How to remove “TrojanDownloader:O97M/Obfuse.PXR!MTB”?