How to remove “VirTool:Win64/Atosev.E”?

The VirTool:Win64/Atosev.E is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What VirTool:Win64/Atosev.E virus can do?

The binary likely contains encrypted or compressed data.

How to determine VirTool:Win64/Atosev.E?


File Info:
crc32: 1EC13893
md5: 47404c90d0b11f125142bbd45dd0bc8a
name: new.exe
sha1: 0107bf1866d8793e40a7f4bc66ca80207fa534f4
sha256: 6b7e18ad1d16dbc7b8f67c42a2153adc979e26c249a3bcbe35855b3ab360aec0
sha512: 88e6b7d8193a7cb97fa6bffcf5256b4390ebe283bd22e34c824ca480dca2068336120080f7a94a2cf5fbed853768399490a2f242256e9603985d7a7e90ab8e54
ssdeep: 12288:vTfOfF1F1P1l1NYa3tCKMBVLD3zA28IJ/kpM5waku7RxclazC5IrXjUxof:vTfOfF1F1dOa3tCKMBVvc28a/Z5XkeR
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2001
InternalName: TransSliderDemo
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: TransSliderDemo Application
ProductVersion: 1, 0, 0, 1
FileDescription: TransSliderDemo MFC Application
OriginalFilename: TransSliderDemo.EXE
Translation: 0x0409 0x04b0

VirTool:Win64/Atosev.E also known as:

DrWeb	Trojan.DownLoader33.52846
MicroWorld-eScan	Trojan.GenericKD.34003578
FireEye	Trojan.GenericKD.34003578
McAfee	Artemis!47404C90D0B1
BitDefender	Trojan.GenericKD.34003578
CrowdStrike	win/malicious_confidence_60% (W)
Symantec	Ransom.Wannacry
APEX	Malicious
GData	Trojan.GenericKD.34003578
Kaspersky	Trojan.Win32.Zenpak.afri
Rising	HackTool.Atosev!8.10256 (CLOUD)
Ad-Aware	Trojan.GenericKD.34003578
Emsisoft	Trojan.GenericKD.34003578 (B)
F-Secure	Trojan.TR/AD.CobaltStrike.qnsxz
McAfee-GW-Edition	Artemis!Trojan
Ikarus	Trojan.CobaltStrike
Webroot	W32.Malware.Gen
Avira	TR/AD.CobaltStrike.qnsxz
Arcabit	Trojan.Generic.D206DA7A
ZoneAlarm	Trojan.Win32.Zenpak.afri
Microsoft	VirTool:Win64/Atosev.E
Cynet	Malicious (score: 85)
MAX	malware (ai score=82)
ESET-NOD32	a variant of Win64/Riskware.CobaltStrike.Beacon.F.gen
Tencent	Win32.Trojan.Zenpak.Pbyu
Fortinet	Riskware/CobaltStrike_Beacon
AVG	FileRepMalware
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.77d

How to remove VirTool:Win64/Atosev.E?

VirTool:Win64/Atosev.E removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X