TrojanSpy:Win32/Obfuscator.KG!MTB removal tips

Malware Removal

The TrojanSpy:Win32/Obfuscator.KG!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Review

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What TrojanSpy:Win32/Obfuscator.KG!MTB virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • A scripting utility was executed
  • Attempts to remove evidence of file being downloaded from the Internet
  • Installs itself for autorun at Windows startup

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine TrojanSpy:Win32/Obfuscator.KG!MTB?


File Info:

crc32: AECCACC0
md5: e136893a55d84228f3284597e9221ac5
name: cvs.exe
sha1: 5c9e61318a599cd895b611f99d386c1999b4c8e1
sha256: 1b13660c52adcccc1cef45f137a3373f5615500a609c61a9872e5ed4336e629a
sha512: 0beb717a9a0d337a8e79dd921a751357a12c77026f278eb1d3df01cbddb62dbf6d4a9cbc407ab909883658197f4b4b995cb699fc8b585db331b9d333b62b2a86
ssdeep: 24576:VGyyqoDGrF83HitfDLXNyhUdch9JvXlIv7FoiVharL5BE/RLsJrOSy77w9tkPj:KO5GHitf/ch//QWbr0/ZeOSbk7
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

TrojanSpy:Win32/Obfuscator.KG!MTB also known as:

MicroWorld-eScanGen:Variant.Ursu.876064
FireEyeGeneric.mg.e136893a55d84228
McAfeeArtemis!28D4B1639562
CylanceUnsafe
SangforMalware
K7AntiVirusTrojan ( 005670491 )
BitDefenderGen:Variant.Ursu.876064
K7GWTrojan ( 005670491 )
Cybereasonmalicious.18a599
Invinceaheuristic
F-ProtW32/Kryptik.BKJ.gen!Eldorado
APEXMalicious
Paloaltogeneric.ml
GDataGen:Variant.Ursu.876064
KasperskyTrojan-Spy.Win32.AveMaria.dds
AlibabaTrojanSpy:Win32/AveMaria.9660b4ce
AegisLabTrojan.Win32.AveMaria.l!c
AvastWin32:Trojan-gen
SophosMal/Generic-S
F-SecureTrojan.TR/Agent.xvfuf
DrWebTrojan.PWS.Maria.4
EmsisoftGen:Variant.Ursu.876064 (B)
IkarusTrojan.MSIL.Agent
CyrenW32/Kryptik.BKJ.gen!Eldorado
Aviraigfxmgmt.exe
Antiy-AVLGrayWare/Win32.Wacapew
Endgamemalicious (moderate confidence)
ArcabitTrojan.Ursu.DD5E20
ZoneAlarmTrojan-Spy.Win32.AveMaria.dds
MicrosoftTrojanSpy:Win32/Obfuscator.KG!MTB
BitDefenderThetaGen:NN.ZexaF.34110.dr0@au98ISj
MalwarebytesBackdoor.AveMaria
ESET-NOD32a variant of MSIL/Agent.CNT
RisingTrojan.Kryptik!8.8 (C64:YzY0OuwqsxJQTEzj)
MAXmalware (ai score=86)
FortinetW32/Agent.CNT!tr
AVGWin32:Trojan-gen
CrowdStrikewin/malicious_confidence_60% (W)
Qihoo-360QVM41.1.Malware.Gen

How to remove TrojanSpy:Win32/Obfuscator.KG!MTB?

TrojanSpy:Win32/Obfuscator.KG!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment