About "VirTool:Win32/Obfuscator.CAM" infection

The VirTool:Win32/Obfuscator.CAM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VirTool:Win32/Obfuscator.CAM virus can do?

Injection (inter-process)
Injection (Process Hollowing)
Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Executed a process and injected code into it, probably while unpacking
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine VirTool:Win32/Obfuscator.CAM?


File Info:
crc32: EEDF5C5B
md5: af4eee51984d9dcd714b65c8defc9b66
name: AF4EEE51984D9DCD714B65C8DEFC9B66.mlw
sha1: 44587d2e493a165ca7ca9af7f353107d008426b8
sha256: a34444775f94f6e915a6c1e600f8ef02668bf89a4cddffc899c8069c0f62c613
sha512: cdf951ac8cadf2afe5007b9066cb5742a1f27082a5a9801228323683610e9020cf1b022c26187df0a85e9c98cb0006688b44173aade753c0ba27ff0a2c28b689
ssdeep: 6144:mHgpoHsQZh45j7zZYWMqPR3PiTkktA3yb4F:mApoMPj7zTMqPR3PiTkCb
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2016
InternalName: zefzef.exe
FileVersion: 1.0.0.1
CompanyName: TODO: 
ProductName: TODO: 
ProductVersion: 1.0.0.1
FileDescription: TODO: 
OriginalFilename: zefzef.exe
Translation: 0x040c 0x04b0

VirTool:Win32/Obfuscator.CAM also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Riskware ( 0040eff71 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Trojan.BRMon.Gen.4
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (D)
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.1984d9
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Generik.HCNVGAU
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Trojan.BRMon.Gen.4
NANO-Antivirus	Trojan.Win32.Obfuscate.evkrma
MicroWorld-eScan	Trojan.BRMon.Gen.4
Tencent	Win32.Trojan.Ransom.Loru
Ad-Aware	Trojan.BRMon.Gen.4
Sophos	ML/PE-A + Troj/Shiotob-BJ
Comodo	Malware@#3utc873z8qg0a
BitDefenderTheta	Gen:NN.ZexaF.34692.pu3@aGAIg7le
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_HPISDA.SM
McAfee-GW-Edition	BehavesLike.Win32.VBobfus.dc
FireEye	Generic.mg.af4eee51984d9dcd
Emsisoft	Trojan.BRMon.Gen.4 (B)
SentinelOne	Static AI – Suspicious PE
Avira	TR/Obfuscate.ertvk
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.22CE2B4
Microsoft	VirTool:Win32/Obfuscator.CAM
GData	Trojan.BRMon.Gen.4
AhnLab-V3	Win-Trojan/MalPe34.Suspicious.X2029
McAfee	Trojan-FJNQ!AF4EEE51984D
MAX	malware (ai score=100)
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_HPISDA.SM
Rising	HackTool.Obfuscator!8.236 (CLOUD)
Ikarus	Trojan.SuspectCRC
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Generic.AP.173F4!tr
AVG	Win32:Malware-gen

How to remove VirTool:Win32/Obfuscator.CAM?

VirTool:Win32/Obfuscator.CAM removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “VirTool:Win32/Obfuscator.CAM” infection