Categories: Malware

VirTool:Win32/Meterpreter removal guide

The VirTool:Win32/Meterpreter is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VirTool:Win32/Meterpreter virus can do?

Injection (inter-process)
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
Anomalous binary characteristics

How to determine VirTool:Win32/Meterpreter?


File Info:
crc32: 18E71677md5: 38b982f058dc61f1372483f5eda72cc9name: 38B982F058DC61F1372483F5EDA72CC9.mlwsha1: bd6f14595cccdd7782d8ee20519c9be5f0bb6e97sha256: 806f77da4b64bf2408351f375f319b6803a4151ba826d0b18d06d3a7c48ece76sha512: 8e90ddd373cd6218c50fbc3358dfe766eeea9d1124f0975c22ffa8705636e36b54f9c1f9a2b66a64f1fde0baf5543a9dc9f251333aeac2b0c8a30359690bbdeessdeep: 48:id+P3zSSxPIux486DhFhklWqJ1ATd58F6J30Sf:QvSx335JOR5o6J30type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

VirTool:Win32/Meterpreter also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Generic.Exploit.Shellcode.3.56EA227D
FireEye	Generic.mg.38b982f058dc61f1
Qihoo-360	Win32/HackTool.Meterpreter.HgkASPcA
ALYac	Generic.Exploit.Shellcode.3.56EA227D
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
BitDefender	Generic.Exploit.Shellcode.3.56EA227D
BitDefenderTheta	Gen:NN.ZedlaF.34590.aq4@aWUDrFg
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_SWRORT.SMDSA
Avast	Win32:HacktoolX-gen [Trj]
Kaspersky	HEUR:Trojan.Win32.Generic
Alibaba	VirTool:Win32/Meterpreter.0e15a5ba
NANO-Antivirus	Trojan.Win32.Invader.idvxxx
Rising	HackTool.Swrort!1.6477 (CLOUD)
Ad-Aware	Generic.Exploit.Shellcode.3.56EA227D
Emsisoft	Generic.Exploit.Shellcode.3.56EA227D (B)
F-Secure	Trojan.TR/Hijacker.Gen
Zillya	Trojan.Inject.Win32.308941
TrendMicro	TROJ_SWRORT.SMDSA
McAfee-GW-Edition	Trojan-FTFU!38B982F058DC
Sophos	ML/PE-A
Ikarus	Trojan.Win32.Inject
Jiangmin	Trojan.Generic.gpclr
Webroot	W32.Trojan.MSShellcode-7
Avira	TR/Hijacker.Gen
MAX	malware (ai score=82)
Antiy-AVL	Trojan/Win32.Inject
Microsoft	VirTool:Win32/Meterpreter
Arcabit	Generic.Exploit.Shellcode.3.56EA227D
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Generic.Exploit.Shellcode.3.56EA227D
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Generic.C4270579
McAfee	Trojan-FTFU!38B982F058DC
VBA32	BScope.Trojan.Invader
Malwarebytes	Malware.AI.104439492
Panda	Trj/GdSda.A
APEX	Malicious
ESET-NOD32	a variant of Win32/Inject.NJV
Yandex	Trojan.Invader!+IjW7WBKmw0
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Kryptik.DALA!tr
AVG	Win32:HacktoolX-gen [Trj]