Virus.Obfuscator.XI

The detection of Virus.Obfuscator.XI on your system indicates a potential security threat that requires immediate attention. This detection name suggests a type of malicious software designed to evade detection and obstruct analysis, which can lead to various security issues if not addressed promptly.

What Is Virus.Obfuscator.XI?

Virus.Obfuscator.XI is identified as a Trojan-type threat, which typically involves malicious software disguised as legitimate programs. Trojans can allow unauthorized access to a computer system, enabling the perpetrator to steal sensitive information, install additional malware, or disrupt system operation. The term "Obfuscator" implies that this malware is designed to hide its true intentions and functionalities, making it challenging for security software to detect and remove it.

How Virus.Obfuscator.XI Operates

Trojan-type malware like Virus.Obfuscator.XI usually operates by deceiving users into installing it on their systems. This can happen through various means, such as opening malicious email attachments, clicking on links to malicious websites, or downloading software from untrusted sources. Once installed, the malware can communicate with its command and control servers to receive instructions, which might include stealing personal data, logging keystrokes, or using the infected computer as part of a botnet for malicious activities.

Symptoms of Infection

Symptoms of a Virus.Obfuscator.XI infection can vary but may include unusual system behavior, such as slow performance, frequent crashes, or the appearance of unwanted programs or toolbars in your web browser. You might also notice that your antivirus software is disabled or that certain system settings have been altered without your consent. In some cases, the infection might not display obvious symptoms, making regular system scans crucial for detection.

• Unexplained changes in system settings or performance.
• Appearance of unwanted software or browser extensions.
• Increased network activity without a clear cause.

<!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Aliases

15 security vendors flagged this file as malicious.

Antivirus Vendor	Detection
Ikarus	Backdoor.Win32.Androm
AhnLab-V3	Trojan/Win32.Birele
AntiVir	TR/Crypt.XPACK.Gen
Comodo	TrojWare.Win32.Kryptik.AHXD
Avast	Win32:Downloader-PGX [Trj]
CAT-QuickHeal	TrojanPWS.Zbot.Gen
Kaspersky	Trojan-Dropper.Win32.Dapato.blhc
Avast	Win32:Kryptik-JDB [Trj]
NOD32	a variant of Win32/Kryptik.AHZG
McAfee	Artemis!40EDAAA6F28E
AVG	Generic28.ICH
AhnLab-V3	Trojan/Win32.Zbot
AntiVir	TR/Agent.107520.37
Sophos	Mal/Zbot-FX
BitDefender	Gen:Heur.IPZ.5

File System Details

Virus.Obfuscator.XI may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections i Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	sp.DLL	73d9002e188f52de7c167c90f319f2ad	12 +
Name: sp.DLL MD5: 73d9002e188f52de7c167c90f319f2ad Size: 149.5 KB (149504 bytes) Detections: 12 Type: Dynamic link library Path: %APPDATA%\Acronis Group: Malware file Last Updated: December 17, 2012
2.	setup.exe	f78eb2e794dc50560042115904047260	12 +
Name: setup.exe MD5: f78eb2e794dc50560042115904047260 Size: 46.08 KB (46080 bytes) Detections: 12 Type: Executable File Path: %WINDIR%\TEMP\hournc Group: Malware file Last Updated: December 17, 2012
3.	svc2dll.exe	4daf23aa252762a65171527357c110fe	8 +
Name: svc2dll.exe MD5: 4daf23aa252762a65171527357c110fe Size: 252.92 KB (252928 bytes) Detections: 8 Type: Executable File Path: %WINDIR%\SysWOW64 Group: Malware file Last Updated: August 21, 2012
4.	fest0r_ot.exe	503954ca42905aa8ed5f4c7f1fbe3fe5	7 +
Name: fest0r_ot.exe MD5: 503954ca42905aa8ed5f4c7f1fbe3fe5 Size: 146.94 KB (146944 bytes) Detections: 7 Type: Executable File Path: %SystemDrive%\Users\<username>\AppData\Roaming Group: Malware file Last Updated: September 25, 2012
5.	2EEDEC141FE284E38C8FAF489EDFA25.exe	67709ad64e5767b00572c31d86c6c1b0	6 +
Name: 2EEDEC141FE284E38C8FAF489EDFA25.exe MD5: 67709ad64e5767b00572c31d86c6c1b0 Size: 56.83 KB (56832 bytes) Detections: 6 Type: Executable File Path: %ALLUSERSPROFILE% Group: Malware file Last Updated: April 4, 2020
6.	TRACERT.exe	568984cbafa439ec6bb2cccd66293a8f	3 +
Name: TRACERT.exe MD5: 568984cbafa439ec6bb2cccd66293a8f Size: 51.2 KB (51200 bytes) Detections: 3 Type: Executable File Path: %LOCALAPPDATA%\Microsoft\Windows\3654 Group: Malware file Last Updated: January 28, 2013
7.	install_0_msi.exe	143540563bf8e95a6d53890bc22965c8	3 +
Name: install_0_msi.exe MD5: 143540563bf8e95a6d53890bc22965c8 Size: 153.08 KB (153088 bytes) Detections: 3 Type: Executable File Path: %SystemDrive%\Users\<username>\AppData\Roaming Group: Malware file Last Updated: August 21, 2012
8.	wscinterop.exe	40edaaa6f28e81e2af517fb8d1fd81b4	2 +
Name: wscinterop.exe MD5: 40edaaa6f28e81e2af517fb8d1fd81b4 Size: 49.15 KB (49152 bytes) Detections: 2 Type: Executable File Path: %LOCALAPPDATA%\Microsoft\Windows\4714 Group: Malware file Last Updated: April 22, 2013
9.	C639636C3B6.exe	c79e589ca856a24818bb22af43b1107d	2 +
Name: C639636C3B6.exe MD5: c79e589ca856a24818bb22af43b1107d Size: 180.22 KB (180224 bytes) Detections: 2 Type: Executable File Path: %SystemDrive%\sysproc.bin Group: Malware file Last Updated: July 20, 2012
10.	wwancfg.exe	dadba302532e279056fc58f9c9412411	2 +
Name: wwancfg.exe MD5: dadba302532e279056fc58f9c9412411 Size: 55.8 KB (55808 bytes) Detections: 2 Type: Executable File Path: %LOCALAPPDATA%\Microsoft\Windows\707 Group: Malware file Last Updated: February 14, 2013
11.	govsystem.exe	8dde7929a91639fc676bc5c1576a9b75	2 +
Name: govsystem.exe MD5: 8dde7929a91639fc676bc5c1576a9b75 Size: 114.68 KB (114688 bytes) Detections: 2 Type: Executable File Path: %USERPROFILE% Group: Malware file Last Updated: January 31, 2013
12.	0_0u_l.exe	fd17f09801b030f539fb0b56a04b4d8b	2 +
Name: 0_0u_l.exe MD5: fd17f09801b030f539fb0b56a04b4d8b Size: 147.96 KB (147968 bytes) Detections: 2 Type: Executable File Path: %SystemDrive%\Users\<username>\AppData\Roaming Group: Malware file Last Updated: April 22, 2013
13.	govtwgs.exe	6d363d92d1130e8d0c27db453785a484	1 +
Name: govtwgs.exe MD5: 6d363d92d1130e8d0c27db453785a484 Size: 106.49 KB (106496 bytes) Detections: 1 Type: Executable File Path: %USERPROFILE% Group: Malware file Last Updated: July 20, 2012
14.	n.	6d2b2c70524bbf25941fd6fafdcf8a16	1 +
Name: n. MD5: 6d2b2c70524bbf25941fd6fafdcf8a16 Size: 72.7 KB (72704 bytes) Detections: 1 Path: %SystemDrive%\RECYCLER\S-1-5-21-2856520603-1355568029-4247568029-1013\$4ea2620dfd10045a7c5941e6c11f2072 Group: Malware file Last Updated: November 6, 2012
15.	Y9zq41PelH.dll	4a47967e8f24bbd639b158de21c17643	1 +
Name: Y9zq41PelH.dll MD5: 4a47967e8f24bbd639b158de21c17643 Size: 107.52 KB (107520 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE% Group: Malware file Last Updated: March 4, 2013

More files