VirTool:Win32/Obfuscator.E malicious file

The VirTool:Win32/Obfuscator.E is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What VirTool:Win32/Obfuscator.E virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine VirTool:Win32/Obfuscator.E?


File Info:
name: FB53D90CC2AFCD5BC773.mlw
path: /opt/CAPEv2/storage/binaries/9de748e7a5e6ba690acaa22b77aec8e6309137ab85dde20c8b724b418bf97962
crc32: E810034C
md5: fb53d90cc2afcd5bc7736c9f49910124
sha1: 2ec0dcd9acf3366d37a77f7c6ae8cbe6d4b53d08
sha256: 9de748e7a5e6ba690acaa22b77aec8e6309137ab85dde20c8b724b418bf97962
sha512: b3582a25a10a9df9021a29215ccf06479a07b8532b379e4b766bfc310586960297ca9bdeb0e546e2f4278cb308a6c34ec0772be8eec2fe53c0b0dc539ad41d87
ssdeep: 12288:WRXxReZj3WZfj/2eSseWFaIe2+f8CL47bs/Zf2BDU:Wx7cyF2eSsewS8W47eZO
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D3B4AF02BAC1C072D57651300D2AF775DAF9BC20193A457BB3DA1D9BFD70190B63AAB2
sha3_384: 1560bba8da7297ac8b8800aff4709c1175bb4469e17b146c8c0fba16620a267daa4b3bcd63b319a4048384b11b96cf59
ep_bytes: 00000000000000000000000000000000
timestamp: 1989-12-06 15:02:04

Version Info:
0: [No Data]

VirTool:Win32/Obfuscator.E also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.lojh
MicroWorld-eScan	Trojan.GenericKD.68475325
FireEye	Generic.mg.fb53d90cc2afcd5b
Skyhigh	BehavesLike.Win32.Generic.hh
ALYac	Trojan.GenericKD.68475325
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Trojan.GenericKD.68475325
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 00584baa1 )
BitDefender	Trojan.GenericKD.68475325
K7GW	Riskware ( 00584baa1 )
CrowdStrike	win/malicious_confidence_100% (W)
Baidu	Win32.Trojan.Kryptik.awm
Symantec	ML.Attribute.HighConfidence
Elastic	Windows.Trojan.Remcos
ESET-NOD32	a variant of Win32/GenKryptik.FVBJ
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Trojan.Remcos-9841897-0
Alibaba	Backdoor:Win32/Remcos.a92ddf08
Rising	Trojan.Injector!1.6768 (CLASSIC)
Sophos	Mal/Generic-S
F-Secure	Backdoor.BDS/Backdoor.Gen
DrWeb	Trojan.Inject4.57973
TrendMicro	Cryp_Morphine
Trapmine	malicious.moderate.ml.score
Emsisoft	Trojan.GenericKD.68475325 (B)
Ikarus	Worm.Win32.Bagle
Avira	BDS/Backdoor.Gen
MAX	malware (ai score=80)
Antiy-AVL	Trojan/Win32.GenKryptik
Microsoft	VirTool:Win32/Obfuscator.E
Xcitium	TrojWare.Win32.PkdMorphine.~AN@1l4q0o
Arcabit	Trojan.Generic.D414D9BD
GData	Trojan.GenericKD.68475325
Varist	W32/Remcos.V.gen!Eldorado
AhnLab-V3	Packed/Win.Morphine.R585725
McAfee	New Malware.cc
DeepInstinct	MALICIOUS
VBA32	Backdoor.Remcos
Cylance	unsafe
TrendMicro-HouseCall	Cryp_Morphine
Tencent	Win32.Backdoor.Backdoor.Snkl
Yandex	Packed/Morphine.B
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/GenKryptik.FVBJ!tr
AVG	Win32:RATX-gen [Trj]
Cybereason	malicious.9acf33
Avast	Win32:RATX-gen [Trj]

How to remove VirTool:Win32/Obfuscator.E?

VirTool:Win32/Obfuscator.E removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X