Virus.Obfuscator.XI

By CagedTech in Viruses

Threat Scorecard

Threat Level:	80 % (High)
Infected Computers:	87

First Seen:	July 20, 2012
Last Seen:	April 4, 2020
OS(es) Affected:	Windows

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
Ikarus	Backdoor.Win32.Androm
AhnLab-V3	Trojan/Win32.Birele
AntiVir	TR/Crypt.XPACK.Gen
DrWeb	Trojan.Packed.22757
Comodo	TrojWare.Win32.Kryptik.AHXD
Avast	Win32:Downloader-PGX [Trj]
CAT-QuickHeal	TrojanPWS.Zbot.Gen
DrWeb	BackDoor.Andromeda.22
Kaspersky	Trojan-Dropper.Win32.Dapato.blhc
Avast	Win32:Kryptik-JDB [Trj]
NOD32	a variant of Win32/Kryptik.AHZG
McAfee	Artemis!40EDAAA6F28E
AVG	Generic28.ICH
AhnLab-V3	Trojan/Win32.Zbot
AntiVir	TR/Agent.107520.37

File System Details

Virus.Obfuscator.XI may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	sp.DLL	73d9002e188f52de7c167c90f319f2ad	12
Name: sp.DLL MD5: 73d9002e188f52de7c167c90f319f2ad Size: 149.5 KB (149504 bytes) Detections: 12 Type: Dynamic link library Path: %APPDATA%\Acronis Group: Malware file Last Updated: December 17, 2012
2.	setup.exe	f78eb2e794dc50560042115904047260	12
Name: setup.exe MD5: f78eb2e794dc50560042115904047260 Size: 46.08 KB (46080 bytes) Detections: 12 Type: Executable File Path: %WINDIR%\TEMP\hournc Group: Malware file Last Updated: December 17, 2012
3.	n.	7536468e5d036cf90196307ee34eb756	11
Name: n. MD5: 7536468e5d036cf90196307ee34eb756 Size: 74.24 KB (74240 bytes) Detections: 11 Path: %SystemDrive%\RECYCLER\S-1-5-21-523116037-1467555602-1128389932-1006\$18a8cceb0fa314597f8a4435515e9ad3 Group: Malware file Last Updated: October 22, 2012
4.	svc2dll.exe	4daf23aa252762a65171527357c110fe	8
Name: svc2dll.exe MD5: 4daf23aa252762a65171527357c110fe Size: 252.92 KB (252928 bytes) Detections: 8 Type: Executable File Path: %WINDIR%\SysWOW64 Group: Malware file Last Updated: August 21, 2012
5.	fest0r_ot.exe	503954ca42905aa8ed5f4c7f1fbe3fe5	7
Name: fest0r_ot.exe MD5: 503954ca42905aa8ed5f4c7f1fbe3fe5 Size: 146.94 KB (146944 bytes) Detections: 7 Type: Executable File Path: %SystemDrive%\Users\<username>\AppData\Roaming Group: Malware file Last Updated: September 25, 2012
6.	2EEDEC141FE284E38C8FAF489EDFA25.exe	67709ad64e5767b00572c31d86c6c1b0	6
Name: 2EEDEC141FE284E38C8FAF489EDFA25.exe MD5: 67709ad64e5767b00572c31d86c6c1b0 Size: 56.83 KB (56832 bytes) Detections: 6 Type: Executable File Path: %ALLUSERSPROFILE% Group: Malware file Last Updated: April 4, 2020
7.	sp.DLL	6e6ea15412240774772a5deb474cc0e5	5
Name: sp.DLL MD5: 6e6ea15412240774772a5deb474cc0e5 Size: 150.01 KB (150016 bytes) Detections: 5 Type: Dynamic link library Path: %APPDATA%\Acer Group: Malware file Last Updated: August 21, 2012
8.	TRACERT.exe	568984cbafa439ec6bb2cccd66293a8f	3
Name: TRACERT.exe MD5: 568984cbafa439ec6bb2cccd66293a8f Size: 51.2 KB (51200 bytes) Detections: 3 Type: Executable File Path: %LOCALAPPDATA%\Microsoft\Windows\3654 Group: Malware file Last Updated: January 28, 2013
9.	install_0_msi.exe	143540563bf8e95a6d53890bc22965c8	3
Name: install_0_msi.exe MD5: 143540563bf8e95a6d53890bc22965c8 Size: 153.08 KB (153088 bytes) Detections: 3 Type: Executable File Path: %SystemDrive%\Users\<username>\AppData\Roaming Group: Malware file Last Updated: August 21, 2012
10.	wscinterop.exe	40edaaa6f28e81e2af517fb8d1fd81b4	2
Name: wscinterop.exe MD5: 40edaaa6f28e81e2af517fb8d1fd81b4 Size: 49.15 KB (49152 bytes) Detections: 2 Type: Executable File Path: %LOCALAPPDATA%\Microsoft\Windows\4714 Group: Malware file Last Updated: April 22, 2013
11.	C639636C3B6.exe	c79e589ca856a24818bb22af43b1107d	2
Name: C639636C3B6.exe MD5: c79e589ca856a24818bb22af43b1107d Size: 180.22 KB (180224 bytes) Detections: 2 Type: Executable File Path: %SystemDrive%\sysproc.bin Group: Malware file Last Updated: July 20, 2012
12.	wwancfg.exe	dadba302532e279056fc58f9c9412411	2
Name: wwancfg.exe MD5: dadba302532e279056fc58f9c9412411 Size: 55.8 KB (55808 bytes) Detections: 2 Type: Executable File Path: %LOCALAPPDATA%\Microsoft\Windows\707 Group: Malware file Last Updated: February 14, 2013
13.	govsystem.exe	8dde7929a91639fc676bc5c1576a9b75	2
Name: govsystem.exe MD5: 8dde7929a91639fc676bc5c1576a9b75 Size: 114.68 KB (114688 bytes) Detections: 2 Type: Executable File Path: %USERPROFILE% Group: Malware file Last Updated: January 31, 2013
14.	0_0u_l.exe	fd17f09801b030f539fb0b56a04b4d8b	2
Name: 0_0u_l.exe MD5: fd17f09801b030f539fb0b56a04b4d8b Size: 147.96 KB (147968 bytes) Detections: 2 Type: Executable File Path: %SystemDrive%\Users\<username>\AppData\Roaming Group: Malware file Last Updated: April 22, 2013
15.	govtwgs.exe	6d363d92d1130e8d0c27db453785a484	1
Name: govtwgs.exe MD5: 6d363d92d1130e8d0c27db453785a484 Size: 106.49 KB (106496 bytes) Detections: 1 Type: Executable File Path: %USERPROFILE% Group: Malware file Last Updated: July 20, 2012
16.	n.	6d2b2c70524bbf25941fd6fafdcf8a16	1
Name: n. MD5: 6d2b2c70524bbf25941fd6fafdcf8a16 Size: 72.7 KB (72704 bytes) Detections: 1 Path: %SystemDrive%\RECYCLER\S-1-5-21-2856520603-1355568029-4247568029-1013\$4ea2620dfd10045a7c5941e6c11f2072 Group: Malware file Last Updated: November 6, 2012
17.	Y9zq41PelH.dll	4a47967e8f24bbd639b158de21c17643	1
Name: Y9zq41PelH.dll MD5: 4a47967e8f24bbd639b158de21c17643 Size: 107.52 KB (107520 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE% Group: Malware file Last Updated: March 4, 2013

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Virus.Obfuscator.XI

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

File System Details

Submit Comment

Trending

PracticalRemote

Triovideo.ru

Elibe Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen