Win32/Obfuscated.NFG removal instruction

The Win32/Obfuscated.NFG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Obfuscated.NFG virus can do?

Executable code extraction
Creates RWX memory
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs
Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Obfuscated.NFG?


File Info:
crc32: 04BD1870
md5: 432c008f7152d0321b6fbfd62107d5d4
name: 432C008F7152D0321B6FBFD62107D5D4.mlw
sha1: a49389f1fa136c2084bca9407a8490b0376d2cad
sha256: c8c8a2f868fcf25a18adb986088c7e50a87283e508317bfca166e2e4c2061011
sha512: 5eae7c4fb172479b390186814544dde013f6e6a2369f0c745e8562892e1200bea0e407d4911881c2a8c5301a9e4e7e712e6977ccb4587b855d0f6f90d5e3b6cb
ssdeep: 24576:uaqyhjvqCsoh1ujeDNeWph81N1UfnIyHbBQX3UJ:ueRvaBjeDNR/8ZUfnbBw3
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Win32/Obfuscated.NFG also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0055e3fb1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.KillFiles.22380
CrowdStrike	win/malicious_confidence_80% (D)
K7GW	Trojan ( 0055e3fb1 )
Cybereason	malicious.1fa136
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Obfuscated.NFG
APEX	Malicious
Avast	Win32:MalOb-JL [Cryp]
Cynet	Malicious (score: 100)
Kaspersky	UDS:Trojan-Downloader.Win32.Upatre.gen
NANO-Antivirus	Trojan.Win32.MlwGen.dlkcxw
BitDefenderTheta	Gen:NN.ZexaF.34294.jnW@ay6oDWp
McAfee-GW-Edition	BehavesLike.Win32.VirRansom.tm
FireEye	Generic.mg.432c008f7152d032
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Generic.aepqe
Avira	TR/Crypt.ZPACK.Gen9
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
McAfee	Artemis!432C008F7152
Rising	Malware.Heuristic!ET#93% (RDMK:cmRtazqOJovhzgdi3jwUESE7dl1K)
Ikarus	Virus.Win32.Cryptor
Fortinet	W32/Agent.XOT!tr
AVG	Win32:MalOb-JL [Cryp]

How to remove Win32/Obfuscated.NFG?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Obfuscated.NFG removal instruction