Categories: Rootkit

VirTool:WinNT/Rootkitdrv!FX removal

The VirTool:WinNT/Rootkitdrv!FX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VirTool:WinNT/Rootkitdrv!FX virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.

How to determine VirTool:WinNT/Rootkitdrv!FX?


File Info:
crc32: E5FD7889md5: b66e330e87996b8fc0966770137bc0a6name: B66E330E87996B8FC0966770137BC0A6.mlwsha1: df7483d7750c1963fa04238246b08b09fe0495e4sha256: 6295012a8d898a160870db3ebbf7ed4b4c089a27e0bad3108ccef0e8948e2852sha512: 83cd4840acae93a27e5b37a75b4720de92a2cbc35c53f73b64200d0e81821a343a85f3235d8c757db906552f5ee4580ff7949f7b5b3243dfd1e7b55b542be7edssdeep: 49152:uupbUqIS6lpvlG4tV4k+s8KuqGaX0ToIBAUZLY1:BelpvlG4T+JBAUZLWtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright 2019 - 2021 SuperMic.All Rights Reserved.FileVersion: 1.4.0.1CompanyName: SuperMicComments: YTClient InstallerProductName: YTClient InstallerProductVersion: 1.4.0.1FileDescription: YTClient InstallerTranslation: 0x0804 0x04b0

VirTool:WinNT/Rootkitdrv!FX also known as:

K7AntiVirus	Trojan ( 005246d51 )
Lionic	Trojan.Win32.Generic.lwTx
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Wsgame.35243
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.37934421
Cylance	Unsafe
Sangfor	Rootkit.Win32.HideProc.bj
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Rootkit:Win32/HideProc.76396689
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.7750c1
Baidu	Win32.Rootkit.HideProc.b
Cyren	W32/Trojan.CLL.gen!Eldorado
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
Avast	Win32:GenMaliciousA-BNL [Trj]
ClamAV	Win.Trojan.Rootkit-6027
Kaspersky	UDS:Rootkit.Win32.HideProc.bj
BitDefender	Trojan.GenericKD.37934421
MicroWorld-eScan	Trojan.GenericKD.37934421
Tencent	Win32.Trojan.Agent.Pezm
Ad-Aware	Trojan.GenericKD.37934421
Sophos	Generic PUA NP (PUA)
Comodo	TrojWare.Win32.Agent.OSCF@5rs7jr
BitDefenderTheta	Gen:NN.ZexaF.34266.gs0@aCdwn5eb
TrendMicro	TROJ_GEN.R002C0DK321
McAfee-GW-Edition	BehavesLike.Win32.Dropper.vh
FireEye	Generic.mg.b66e330e87996b8f
Emsisoft	Trojan.GenericKD.37934421 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Rootkitdrv.xlnte
Antiy-AVL	Trojan/Generic.ASCommon.FA
Microsoft	VirTool:WinNT/Rootkitdrv.gen!FX
Arcabit	Trojan.Generic.D242D555
GData	Win32.Trojan.PSE.19Q2126
AhnLab-V3	Trojan/Win.GenMaliciousA.C4748817
Acronis	suspicious
McAfee	Artemis!B66E330E8799
MAX	malware (ai score=81)
VBA32	BScope.Trojan.Tiggre
Malwarebytes	Trojan.MalPack.FlyStudio
TrendMicro-HouseCall	TROJ_GEN.R002C0DK321
Rising	Trojan.Generic@ML.93 (RDMK:TKIjNLoG7j24n8jwT6EXAw)
Ikarus	Trojan.Win32.Disabler
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CoinMiner.65CA!tr
AVG	Win32:GenMaliciousA-BNL [Trj]
Paloalto	generic.ml