VirTool:Win32/Obfuscator.XX

By GoldSparrow in Malware

Threat Scorecard

Ranking:	15,786
Threat Level:	80 % (High)
Infected Computers:	2,641

First Seen:	December 20, 2010
Last Seen:	April 4, 2024
OS(es) Affected:	Windows

Microsft Windows has built-in essential security mechanisms that may notify PC users of a detected VirTool:Win32/Obfuscator.XX threat. Security experts note that the VirTool:Win32/Obfuscator.XX detection is a broad term that encompasses programs that are obfuscated deliberately to prevent runtime analysis and code execution prevention. Technically, VirTool:Win32/Obfuscator.XX may be a detection of ransomware, backdoor trojans, RATs, worms, viruses and trojan downloaders. Users that are presented with security alerts about VirTool:Win32/Obfuscator.XX should revise recently installed free programs, check their extension managers for suspicious additions and ensure that they are using the most recent version of Java and Adobe Flash Player. Given the broad spectrum of malware that could be detected as VirTool:Win32/Obfuscator.XX you should take into consideration that most cyber threats are propagated as attachments to spam mail, and you may want to check your Downloads folder.

VirTool:Win32/Obfuscator.XX may appear as an archive file but don't be fooled by its icon because it may have a double file extension and prove to be an executable program. The VirTool:Win32/Obfuscator.XX malware may contain the payload of threats like CrypVault and TorrentLocker that are famous for their obfuscation techniques. Advanced obfuscation methods can be seen in Xpiro and AutoIt/Fadef that could extract valuable credentials from infected systems. Computer users should employ the services of a renowned anti-malware solution to prevent malware in the VirTool:Win32/Obfuscator.XX category from running on their PC, steal valuable data and install other malware.

Table of Contents

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
McAfee	Artemis!D46F296693C7
McAfee-GW-Edition	Heuristic.LooksLike.Win32.Suspicious.F
McAfee	Generic.grp!ec
CAT-QuickHeal	(Suspicious) - DNAScan
Fortinet	W32/Black.A!tr
Ikarus	Trojan.Win32.Scar
AntiVir	TR/Dropper.Gen
Avast	Win32:Banker-KBN [Trj]
McAfee	Artemis!2EC3705B6072
Symantec	WS.Reputation.1
NOD32	probably a variant of Win32/Spy.Banker.WUH
McAfee	Artemis!DBFBCDDED55E
Avast	Win32:Spyware-gen [Spy]
McAfee	Artemis!D2408DCF0EB3
Ikarus	possible-Threat.Crack.TMPGEnc

SpyHunter Detects & Remove VirTool:Win32/Obfuscator.XX

File System Details

VirTool:Win32/Obfuscator.XX may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	tmpgencdvdauthor3.exe	fa491a0eb9cd1675e3d032cea2775c3f	86
Name: tmpgencdvdauthor3.exe MD5: fa491a0eb9cd1675e3d032cea2775c3f Size: 4.35 MB (4357632 bytes) Detections: 86 Path: C:\Users\<username>\AppData\Local\VirtualStore\Program Files (x86)\Pegasys Inc\TMPGEnc DVD Author 3 with DivX Authoring\tmpgencdvdauthor3.exe Group: Malware file Last Updated: September 18, 2023
2.	actualizador.exe	1f6e2ff217ad06c4cb40d9964f41b3fd	60
Name: actualizador.exe MD5: 1f6e2ff217ad06c4cb40d9964f41b3fd Size: 999.14 KB (999144 bytes) Detections: 60 Type: Executable File Path: C:\Users\<username>\AppData\Local\Temp\ckz_FFUL\actualizador.exe Group: Malware file Last Updated: April 4, 2024
3.	LDStub.exe	f897ad390168dfca209841fa8810841a	44
Name: LDStub.exe MD5: f897ad390168dfca209841fa8810841a Size: 2.62 MB (2625667 bytes) Detections: 44 Type: Executable File Path: C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2008 (English-Persian (Farsi)) for Windows\LDStub.exe Group: Malware file Last Updated: December 2, 2021
4.	EasyDownloads.exe	f29e5a8475aace521e9993543754c786	43
Name: EasyDownloads.exe MD5: f29e5a8475aace521e9993543754c786 Size: 825.36 KB (825368 bytes) Detections: 43 Type: Executable File Path: C:\Program Files\Easy downloads\EasyDownloads.exe Group: Malware file Last Updated: February 9, 2022
5.	firefox.exe	2ec3705b6072ec003732e4d99c28d9b4	11
Name: firefox.exe MD5: 2ec3705b6072ec003732e4d99c28d9b4 Size: 3.9 MB (3904512 bytes) Detections: 11 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: March 21, 2013
6.	laser.exe	afb42069447d9c4164ba312deb5ce977	9
Name: laser.exe MD5: afb42069447d9c4164ba312deb5ce977 Size: 3.14 MB (3142656 bytes) Detections: 9 Type: Executable File Path: C:\Program Files (x86)\Laser Controller\laser.exe Group: Malware file Last Updated: September 18, 2022
7.	temps.exe	7da2c02cdfca6f5499976224f6feb727	9
Name: temps.exe MD5: 7da2c02cdfca6f5499976224f6feb727 Size: 2.83 MB (2837504 bytes) Detections: 9 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: September 2, 2020
8.	LwkxqdY.exe	33a6fa202f48c1b9042d6980ff4a62e5	5
Name: LwkxqdY.exe MD5: 33a6fa202f48c1b9042d6980ff4a62e5 Size: 1.59 MB (1592832 bytes) Detections: 5 Type: Executable File Path: %COMMONPROGRAMFILES%\FwxhxiV Group: Malware file Last Updated: March 30, 2020
9.	Amado Batista AlucinaÃ§Ã£o.exe	20cedfad4359c817390dbdcc95f3ff3c	5
Name: Amado Batista AlucinaÃ§Ã£o.exe MD5: 20cedfad4359c817390dbdcc95f3ff3c Size: 1.48 MB (1489408 bytes) Detections: 5 Type: Executable File Path: %USERPROFILE%\Meus documentos\MISTURA DE RITIMOS 02 Group: Malware file Last Updated: August 22, 2011
10.	firefox.exe	d46f296693c7270622e112fd02f19eb0	4
Name: firefox.exe MD5: d46f296693c7270622e112fd02f19eb0 Size: 4.01 MB (4013568 bytes) Detections: 4 Type: Executable File Path: %PROGRAMFILES%\Mozilla Firefox Group: Malware file Last Updated: May 15, 2013
11.	ipsechlp.exe	30b2b3b7f3d3b37fea1113d00220fd8e	3
Name: ipsechlp.exe MD5: 30b2b3b7f3d3b37fea1113d00220fd8e Size: 397.4 KB (397400 bytes) Detections: 3 Type: Executable File Path: %WINDIR%\system32 Group: Malware file Last Updated: December 24, 2010
12.	PSa74_2247.exe	8e08b1e92a024386479c6bae9e70fae4	3
Name: PSa74_2247.exe MD5: 8e08b1e92a024386479c6bae9e70fae4 Size: 5.01 MB (5012992 bytes) Detections: 3 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data\a740b0 Group: Malware file Last Updated: April 20, 2011
13.	temps.exe	d2408dcf0eb383ddf50559afccf2cdcd	3
Name: temps.exe MD5: d2408dcf0eb383ddf50559afccf2cdcd Size: 2.85 MB (2857472 bytes) Detections: 3 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: May 25, 2020
14.	waconsts.dll	505d588b92a609931b07921345aa4add	2
Name: waconsts.dll MD5: 505d588b92a609931b07921345aa4add Size: 80.38 KB (80384 bytes) Detections: 2 Type: Dynamic link library Path: %LOCALAPPDATA% Group: Malware file Last Updated: December 28, 2010
15.	nerACD.dll	c51b190e86e83e44697e292319437418	2
Name: nerACD.dll MD5: c51b190e86e83e44697e292319437418 Size: 90.11 KB (90112 bytes) Detections: 2 Type: Dynamic link library Path: %LOCALAPPDATA% Group: Malware file Last Updated: January 2, 2011
16.	GxvhdaB.exe	c5678e0508d6e4f5ed749e1419b62177	2
Name: GxvhdaB.exe MD5: c5678e0508d6e4f5ed749e1419b62177 Size: 1.46 MB (1467392 bytes) Detections: 2 Type: Executable File Path: %ALLUSERSPROFILE%\DtykfmJ\IhgwkmT Group: Malware file Last Updated: December 5, 2011
17.	wchksys.exe	bb759d37432e6d5d744214eebf7346ef	2
Name: wchksys.exe MD5: bb759d37432e6d5d744214eebf7346ef Size: 144.38 KB (144384 bytes) Detections: 2 Type: Executable File Path: %APPDATA%\Microsoft\Windows\System Group: Malware file Last Updated: March 8, 2012
18.	syst32.exe	a4270648b3e2496897cc5f300b435fa4	2
Name: syst32.exe MD5: a4270648b3e2496897cc5f300b435fa4 Size: 2.45 MB (2455552 bytes) Detections: 2 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: August 1, 2012
19.	tenthas.exe	dbfbcdded55eb8e4d9dbd492f91474a0	2
Name: tenthas.exe MD5: dbfbcdded55eb8e4d9dbd492f91474a0 Size: 2.69 MB (2692608 bytes) Detections: 2 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: February 11, 2013
20.	IA882_2211.exe	16dd0001a1c8b27ab4c2db3fcc3d0c61	1
Name: IA882_2211.exe MD5: 16dd0001a1c8b27ab4c2db3fcc3d0c61 Size: 3.58 MB (3580416 bytes) Detections: 1 Type: Executable File Path: %ALLUSERSPROFILE%\882d3b Group: Malware file Last Updated: December 28, 2010
21.	IAf8a_2164.exe	2440c41dfe11f7ae1d3d3ee6f7b59523	1
Name: IAf8a_2164.exe MD5: 2440c41dfe11f7ae1d3d3ee6f7b59523 Size: 3.57 MB (3579904 bytes) Detections: 1 Type: Executable File Path: %ALLUSERSPROFILE%\f8a188 Group: Malware file Last Updated: December 23, 2010
22.	IA856_289.exe	0b5487b3f6c401dcdda00c75901d6b89	1
Name: IA856_289.exe MD5: 0b5487b3f6c401dcdda00c75901d6b89 Size: 3.58 MB (3583488 bytes) Detections: 1 Type: Executable File Path: %ALLUSERSPROFILE%\Dati applicazioni\8565c9 Group: Malware file Last Updated: December 23, 2010
23.	IA965_302.exe	5dce68809f701a77de6eb3fa56c5b34d	1
Name: IA965_302.exe MD5: 5dce68809f701a77de6eb3fa56c5b34d Size: 3.59 MB (3599872 bytes) Detections: 1 Type: Executable File Path: %ALLUSERSPROFILE%\96599e Group: Malware file Last Updated: February 1, 2011
24.	Shell_Update.exe	69276bab749f4f06e148031d68af92bf	1
Name: Shell_Update.exe MD5: 69276bab749f4f06e148031d68af92bf Size: 2.29 MB (2297856 bytes) Detections: 1 Type: Executable File Path: %WINDIR%\Shell_Update Group: Malware file Last Updated: August 21, 2012
25.	000003B214FA9539.exe	63dbf019d5f1edf0abf53fc675fe6a72	1
Name: 000003B214FA9539.exe MD5: 63dbf019d5f1edf0abf53fc675fe6a72 Size: 1.54 MB (1548800 bytes) Detections: 1 Type: Executable File Path: %COMMONPROGRAMFILES%\Flash Player Group: Malware file Last Updated: June 3, 2011
26.	B6232F3A65D.exe	c2ff997255f81a0042b6b58e20d1ddcc	1
Name: B6232F3A65D.exe MD5: c2ff997255f81a0042b6b58e20d1ddcc Size: 224.25 KB (224256 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Recycle.Bin Group: Malware file Last Updated: August 13, 2012

More files

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

VirTool:Win32/Obfuscator.XX

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove VirTool:Win32/Obfuscator.XX

File System Details

Submit Comment

Trending

Venanco.com Scam

Looy Ransomware

Sceplondelling.co.in

Most Viewed

Discord Shows Black Screen when Sharing Screen

How To Fix 'Printer Driver is Unavailable' Error

What is Msedge.exe?