VirTool:Win32/Obfuscator!bit information

The VirTool:Win32/Obfuscator!bit is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VirTool:Win32/Obfuscator!bit virus can do?

Executable code extraction
Creates RWX memory
Detected script timer window indicative of sleep style evasion
A process attempted to delay the analysis task.
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
A scripting utility was executed
Tries to unhook or modify Windows functions monitored by Cuckoo
Installs itself for autorun at Windows startup

Related domains:

baidu.com

coolinrek.eu

swkksblqrljvgpavqoj.eu

creunjqukjg.eu

How to determine VirTool:Win32/Obfuscator!bit?


File Info:
crc32: 0839BB8B
md5: 5180edd2ad159ed5181cabfd62da69b8
name: 5180EDD2AD159ED5181CABFD62DA69B8.mlw
sha1: 13f80d2f379e7798757c7425a342b46c78684b71
sha256: 37d9032d0cce20e1aa4c68ac45b496c98179fe817a514b114350ea1119c1b324
sha512: 92b974440efd4306bd48438f754f4e1a51bec995146f9257289433a2d4c09a19a2c22f0cad283c76a1f77040a32f8df82633acdea4a84fa52e63f98b4fca63c6
ssdeep: 12288:/GSg8vc3vGt7nZqXKRfXXGrC8tandXImwXqvGKw:+Sg8E/G1Z4mfXXGrCZImwl
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: The CDex Project - http://cdex.mu/ 2006-2014 (c)
InternalName: Burden
CompanyName: The CDex Project - http://cdex.mu/
FileDescription: Own Receive
LegalTrademarks: The CDex Project - http://cdex.mu/ 2006-2014 (c)
ProductName: Burden
ProductVersion: 3.7.6.8
PrivateBuild: 3.7.6.8
Translation: 0x0409 0x04b0

VirTool:Win32/Obfuscator!bit also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Ramnit.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader25.44632
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Ransom.Scarab.43
Cylance	Unsafe
Zillya	Trojan.Ramnit.Win32.6325
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.2ad159
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Ramnit.CT
APEX	Malicious
Avast	FileRepMalware
Kaspersky	Trojan.Win32.Ramnit.deg
BitDefender	Gen:Variant.Ransom.Scarab.43
NANO-Antivirus	Trojan.Win32.Ramnit.exusoj
MicroWorld-eScan	Gen:Variant.Ransom.Scarab.43
Tencent	Win32.Virus.Ramnit.Suds
Ad-Aware	Gen:Variant.Ransom.Scarab.43
Sophos	Mal/Generic-S
Comodo	Malware@#lmmml5af5hv7
BitDefenderTheta	Gen:NN.ZexaF.34058.ymKfaG@Vvini
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Downloader.fc
FireEye	Generic.mg.5180edd2ad159ed5
Emsisoft	Gen:Variant.Ransom.Scarab.43 (B)
SentinelOne	Static AI – Suspicious PE
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1130305
eGambit	Unsafe.AI_Score_87%
Microsoft	VirTool:Win32/Obfuscator!bit
ZoneAlarm	Trojan.Win32.Ramnit.deg
GData	Gen:Variant.Ransom.Scarab.43
AhnLab-V3	Win-Trojan/Sagecrypt.Gen
McAfee	Artemis!5180EDD2AD15
MAX	malware (ai score=84)
Malwarebytes	Malware.AI.4088605498
Panda	Trj/CI.A
Ikarus	Trojan.Win32.Ramnit
AVG	FileRepMalware
Qihoo-360	Win32/Virus.Ramnit.HwsBEpsA

How to remove VirTool:Win32/Obfuscator!bit?

VirTool:Win32/Obfuscator!bit removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

VirTool:Win32/Obfuscator!bit information