How to remove "VirTool:Win32/Obfuscator.M"?

The VirTool:Win32/Obfuscator.M is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VirTool:Win32/Obfuscator.M virus can do?

Creates RWX memory
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Checks for the presence of known devices from debuggers and forensic tools
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine VirTool:Win32/Obfuscator.M?


File Info:
crc32: 3FE658D4
md5: b41e82e3fa65a8e8a9ee1d1e1217ae1b
name: B41E82E3FA65A8E8A9EE1D1E1217AE1B.mlw
sha1: d447224ce5436eddf333a80d0f9e6860582f72ea
sha256: ffa824ebbb141a1b91c64da1d5f1aad224812feafa0cf5ded659652224dc63be
sha512: 0d445b6b0a04ed71ff387d70b79b11db48c21864fad03aefd2987d842d422b0f3fd00e40375b117da559f3746a392210093918fec07519fb4e11484e41edec15
ssdeep: 12288:DHUiiGmTz7o5EfvxhVjxsVMNX2SXgLC+6jNjR:DHUiirTvo5EfvxhV6VYXvyC+u
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: 
InternalName: 
FileVersion: 1.0.0.365
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: 
ProductVersion: 1.0.0.0
FileDescription: 
OriginalFilename: 
Translation: 0x0804 0x03a8

VirTool:Win32/Obfuscator.M also known as:

MicroWorld-eScan	Gen:Packer.PEArmor.A.Gu0aaCU9Ekjb
CAT-QuickHeal	(Suspicious) – DNAScan
McAfee	Artemis!B41E82E3FA65
K7AntiVirus	Riskware
F-Prot	W32/Heuristic-210!Eldorado
Symantec	Backdoor.Graybird
Norman	W32/Packed_PEArmor.G
TrendMicro-HouseCall	PAK_Generic.008
Avast	Win32:Malware-gen
eSafe	Suspicious File
BitDefender	Gen:Packer.PEArmor.A.Gu0aaCU9Ekjb
Agnitum	Suspicious!SA
Sophos	Mal/Generic-L
Comodo	UnclassifiedMalware
F-Secure	Gen:Packer.PEArmor.A.Gu0aaCU9Ekjb
VIPRE	Trojan.Win32.Generic!BT
AntiVir	TR/Crypt.XPACK.Gen
TrendMicro	PAK_Generic.008
McAfee-GW-Edition	Heuristic.LooksLike.Win32.Suspicious.F
Emsisoft	Trojan.Win32.Crypt (A)
Antiy-AVL	Virus/Win32.AutoRun.gen
Kingsoft	Win32.Troj.Generic.(kcloud)
Microsoft	VirTool:Win32/Obfuscator.M
GData	Gen:Packer.PEArmor.A.Gu0aaCU9Ekjb
Commtouch	W32/Heuristic-210!Eldorado
AhnLab-V3	Backdoor/Win32.Hupigon
PCTools	Backdoor.Graybird!rem
ESET-NOD32	probably a variant of Win32/Obfuscated.EBXTHKX
Ikarus	Trojan.Win32.Pakes
Fortinet	PossibleThreat
Panda	Trj/CI.A

How to remove VirTool:Win32/Obfuscator.M?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

How to remove “VirTool:Win32/Obfuscator.M”?