Categories: Trojan

How to remove “TrojanDownloader:O97M/Obfuse.PXR!MTB”?

The TrojanDownloader:O97M/Obfuse.PXR!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:O97M/Obfuse.PXR!MTB virus can do?

Injection (inter-process)
Injection with CreateRemoteThread in a remote process
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine TrojanDownloader:O97M/Obfuse.PXR!MTB?


File Info:
crc32: F581BDFDmd5: daea44be59abc7fb93789c9ec9535bdfname: upload_filesha1: cddfa3986d6bbe84d4b849b3d681bae5377de81dsha256: 93727c5cfbe727e43f0644f888fddb03c4f5728f82c74952981691f09de44642sha512: 361caf9960a24b831968935337eb9b191fabab697697b3e6240f2fcaa1be0c4f4826ad279ebc0b655b2a2b7c7030b3f6c6cc020c2461153c69564c6abf2497fcssdeep: 6144:Kk3hOdsylKlgryzc4bNhZF+E+W2knF+AqmFkM9lz2KE8hBdLVoo5z9Nn/FDC5GV:V5kMHq/8oo5ztOcVLEP9iYtHliEM9fGtype: Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 1252, Author: DELL, Last Saved By: DELL, Create Time/Date: Thu Aug 13 00:22:51 2020, Last Saved Time/Date: Thu Aug 13 00:22:51 2020, Security: 0
Version Info:
0: [No Data]

TrojanDownloader:O97M/Obfuse.PXR!MTB also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.34352218
FireEye	Trojan.GenericKD.34352218
McAfee	RDN/Generic Downloader.x
AegisLab	Trojan.MSExcel.Generic.4!c
Sangfor	Malware
Symantec	Trojan.Gen.2
Avast	SNH:Script [Dropper]
ClamAV	Xls.Dropper.Agent-9317203-0
Kaspersky	HEUR:Trojan-Downloader.MSOffice.SLoad.gen
BitDefender	Trojan.GenericKD.34352218
ViRobot	XLS.Z.Agent.389120.G
Rising	Downloader.Agent/VBA!1.C970 (CLASSIC)
Ad-Aware	Trojan.GenericKD.34352218
F-Secure	Malware.VBA/Dldr.Agent.ylbmu
DrWeb	Exploit.Siggen2.17439
Fortinet	VBA/Agent.GAK!tr.dldr
Sophos	Troj/DocDl-AABN
Ikarus	Trojan-Downloader.VBA.Agent
Avira	VBA/Dldr.Agent.ylbmu
Antiy-AVL	Trojan[Downloader]/MSOffice.Agent.txv
Arcabit	HEUR.VBA.Trojan.d
ZoneAlarm	HEUR:Trojan-Downloader.MSOffice.SLoad.gen
Microsoft	TrojanDownloader:O97M/Obfuse.PXR!MTB
Cynet	Malicious (score: 85)
ALYac	Trojan.GenericKD.34352218
TACHYON	Suspicious/X97M.Downloader.Gen
Zoner	Probably Heur.W97Obfuscated
ESET-NOD32	VBA/TrojanDownloader.Agent.TXV
Tencent	Heur.Macro.Generic.e.aaa7fb6f
SentinelOne	DFI – Suspicious OLE
GData	Trojan.GenericKD.34352218
AVG	SNH:Script [Dropper]
Qihoo-360	Generic/Trojan.Downloader.3f4