Malware

VirTool:MSIL/Obfuscator.BE removal guide

Malware Removal

The VirTool:MSIL/Obfuscator.BE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What VirTool:MSIL/Obfuscator.BE virus can do?

  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine VirTool:MSIL/Obfuscator.BE?



File Info:

name: FA420DF39DAC5B984E1C.mlw
path: /opt/CAPEv2/storage/binaries/a7311aa74147225544bedda0a941a52aaee16a1edbb461838cb88ec6ecd10575
crc32: 1C46D933
md5: fa420df39dac5b984e1c2d8d19a34a53
sha1: 087349e71b4f198fd0a8f61979931475b8da331f
sha256: a7311aa74147225544bedda0a941a52aaee16a1edbb461838cb88ec6ecd10575
sha512: 6f5400e951348671ab1ee804d50dec610621cee3b3c8357097b79c9a8bdda7fbdc8e51d1c8c7ef87d8d540d579367e9c4a7b9e87b69a305936b2504d347147dc
ssdeep: 3072:bmYZAWkdJqxL8zymqS2NP4GpZL96eZ6kg5Io5DyPfvuQZ:B3kdka8kVbCEAfv
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T177C3E5343AEB902AF1B3EF755AE476969AAFFA333707986D109003470B23941DED1539
sha3_384: 28a67c004ada7c938974e2029d835b72993dc8a62dc096de1744a9c4f781d4a70bc1ba8b92eb53648483151a641c1d53
ep_bytes: ff250020400000000000000000000000
timestamp: 2018-01-19 18:15:48


Version Info:

Translation: 0x0000 0x04b0
FileDescription: WindowsApplication2
FileVersion: 1.0.0.0
InternalName: WindowsApplication2.exe
LegalCopyright: Copyright ©  2018
OriginalFilename: WindowsApplication2.exe
ProductName: WindowsApplication2
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

VirTool:MSIL/Obfuscator.BE also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.Win32.Obfuscator.4!c
DrWebTrojan.DownLoader10.20180
FireEyeGeneric.mg.fa420df39dac5b98
SkyhighArtemis!Trojan
McAfeeArtemis!FA420DF39DAC
Cylanceunsafe
SangforHacktool.Msil.Obfuscator.Vsb4
K7AntiVirusTrojan ( 0051b0991 )
AlibabaVirTool:MSIL/Obfuscator.a353046c
K7GWTrojan ( 0051b0991 )
BitDefenderThetaGen:NN.ZemsilF.36802.hq0@a8OyuNd
VirITTrojan.Win32.Dnldr10.BDWE
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
APEXMalicious
TrendMicro-HouseCallTROJ_GEN.R002C0DAF24
KasperskyHEUR:Trojan.MSIL.Generic
AvastWin32:Malware-gen
F-SecureTrojan.TR/Obfuscator.jzvgf
TrendMicroTROJ_GEN.R002C0DAF24
Trapminemalicious.moderate.ml.score
SophosMal/Generic-S
IkarusTrojan.MSIL.Crypt
JiangminTrojan.MSIL.kccc
GoogleDetected
AviraTR/Obfuscator.jzvgf
Antiy-AVLTrojan/MSIL.AGeneric
Kingsoftmalware.kb.c.991
MicrosoftVirTool:MSIL/Obfuscator.BE
ZoneAlarmHEUR:Trojan.MSIL.Generic
AhnLab-V3Malware/Win32.RL_Generic.C3466878
MAXmalware (ai score=99)
MalwarebytesGeneric.Malware/Suspicious
RisingTrojan.Generic!8.C3 (CLOUD)
YandexTrojan.Agent!zDBaUJJlDKU
MaxSecureTrojan.Malware.11196064.susgen
FortinetW32/Generic!tr
AVGWin32:Malware-gen
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_90% (D)

How to remove VirTool:MSIL/Obfuscator.BE?

VirTool:MSIL/Obfuscator.BE removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment