Follow:

 

VirTool:Win32/Obfuscator.XZ


Microsoft security software detects and removes this threat.

This threat has its purpose obfuscated, or hidden.

VirTool:Win32/Obfuscators use a combination of methods including encryption, compression, anti-debugging and anti-emulation techniques to hide their true purpose.

Malware can be obfuscated with a tool that uses a hacked license. This means non-malicious programs that use the hacked license can also be detected. If this happens you should contact support at the company that provides the non-malicious program and ask for a version that doesn't use the hacked license.

Find out ways that malware can get on your PC.



What to do now

The following free Microsoft software detects and removes this threat:

Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC.

You can also visit the Microsoft virus and malware community or our advanced troubleshooting page for more help.

If you’re using Windows XP, see our Windows XP end of support page.

Threat behavior

VirTool:Win32/Obfuscator.XZ is a detection for a threat that has had its purpose obfuscated.

VirTool:Win32/Obfuscators use a combination of methods including encryption, compression, anti-debugging and anti-emulation techniques to hide their true purpose.

Malware can be obfuscated with a tool that uses a hacked license. This means non-malicious programs that use the hacked license can also be detected. If this happens you should contact support at the company that provides the non-malicious program and ask for a version that doesn't use the hacked license.


Symptoms

These obfuscation techniques are used on different kinds of malware.

The malware that lies "underneath" may have virtually any purpose. Hence, alerts from your security software may be the only symptom.


Prevention


Alert level: Severe
First detected by definition: 1.59.1404.0
Latest detected by definition: 1.151.1984.0 and higher
First detected on: Jun 17, 2009
This entry was first published on: Aug 27, 2009
This entry was updated on: Apr 14, 2014

This threat is also detected as:
No known aliases