Categories: Malware

VirTool:Win32/Obfuscator information

The VirTool:Win32/Obfuscator is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VirTool:Win32/Obfuscator virus can do?

Executable code extraction
Creates RWX memory
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
The binary likely contains encrypted or compressed data.
Detects Sandboxie through the presence of a library
Checks for the presence of known windows from debuggers and forensic tools
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine VirTool:Win32/Obfuscator?


File Info:
crc32: F9AF1362md5: c609f5c6af169f93c05422a470ae84c8name: SniperE_NZA12Tr-LNG_v.1.06.exesha1: 1a0a6f956df5899354b09c6ee3a5747e367f7d80sha256: a250f2268fcb256f273a5c6844b0fd255281fe53073c4872e40b351d818facb1sha512: 8cd647222c6c97c007580fc6d87ff62d0ae22e6d2af18f8ec31ff02ce33925963b9a78fe88fb346c715ccd30db2f8d6b849e098e434b863607eeca9192a84c8assdeep: 49152:03BOP8ghuAOcdGOB5JO3uiZvhlDksBGUMxZh3gcCRPa:03IP8fcH+NZPBGUMNUgtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0409 0x04b0LegalCopyright: LinGonInternalName: SniperE_NZA+12Tr-LNG_15_July_2013_DdayFileVersion: 1.02.0003CompanyName: LinGonComments: Trainer Made By LinGon 2012 - UnMatched Quality Since 2008.ProductName: Sniper Elite: Nazi Zombie Army - 15 July 2013 - Trainer by LinGon - v1.06ProductVersion: 1.02.0003FileDescription: A LinGon TrainerOriginalFilename: SniperE_NZA+12Tr-LNG_15_July_2013_Dday.exe

VirTool:Win32/Obfuscator also known as:

Bkav	HW32.Packed.B608
MicroWorld-eScan	Trojan.Generic.9421339
CAT-QuickHeal	Trojan.IGENERIC
McAfee	Generic-FAAF!C609F5C6AF16
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic.pak!cobra
K7AntiVirus	Trojan ( 00006f8a1 )
K7GW	Trojan ( 00006f8a1 )
Arcabit	Trojan.Generic.D8FC21B
Invincea	heuristic
Baidu	Win32.Trojan.WisdomEyes.16070401.9500.9981
NANO-Antivirus	Trojan.Win32.Black.bzswsj
Cyren	W32/A-7fdeb6c8!Eldorado
Symantec	Packed.Vmpbad!gen4
TrendMicro-HouseCall	TROJ_SPNV.03KH13
GData	Trojan.Generic.9421339
BitDefender	Trojan.Generic.9421339
SUPERAntiSpyware	Hack.Tool/Gen-GameHack
Ad-Aware	Trojan.Generic.9421339
Emsisoft	Trojan.Generic.9421339 (B)
Comodo	.UnclassifiedMalware
F-Secure	Trojan.Generic.9421339
DrWeb	Trojan.PWS.Siggen1.28916
Zillya	Trojan.Packed.Win32.35948
TrendMicro	TROJ_SPNV.03KH13
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
Sophos	Mal/VMProtBad-A
Ikarus	Gen.Malware.Heur
F-Prot	W32/A-7fdeb6c8!Eldorado
Webroot	W32.Malware.Gen
Avira	TR/Black.Gen2
Antiy-AVL	Trojan/Win32.TSGeneric
Kingsoft	Win32.Troj.Generic.a.(kcloud)
Microsoft	VirTool:Win32/Obfuscator
Endgame	malicious (high confidence)
AegisLab	Troj.Generic!c
ALYac	Trojan.Generic.9421339
AVware	Trojan.Win32.Generic.pak!cobra
MAX	malware (ai score=100)
Malwarebytes	CrackTool.Agent
Panda	Trj/CI.A
ESET-NOD32	a variant of Win32/Packed.VMProtect.AAH
Yandex	Trojan.Packed!ENC7HHzBIf0
SentinelOne	static engine – malicious
AVG	Win32:Trainer-F [PUP]
Avast	Win32:Trainer-F [PUP]