Follow:

 

VirTool:Win32/Obfuscator.XZ


Microsoft security software detects and removes this threat.

This threat has its purpose obfuscated, or hidden.

It uses a combination of methods including encryption, compression, anti-debugging and anti-emulation techniques to hide its true purpose.

Malware can be obfuscated with a tool that uses a hacked license. This means non-malicious programs that use the hacked license can also be detected. If this happens you should contact support at the company that provides the non-malicious program and ask for a version that doesn't use the hacked license.

Find out ways that malware can get on your PC.



What to do now

Use the following free Microsoft software to detect and remove this threat:

You should also run a full scan. A full scan might find hidden malware.

Get more help

You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.

If you’re using Windows XP, see our Windows XP end of support page.

Threat behavior

This is a detection for a threat that has had its purpose obfuscated.

It uses a combination of methods including encryption, compression, anti-debugging and anti-emulation techniques to hide its true purpose.

Malware can be obfuscated with a tool that uses a hacked license. This means non-malicious programs that use the hacked license can also be detected. If this happens you should contact support at the company that provides the non-malicious program and ask for a version that doesn't use the hacked license.


Symptoms

These obfuscation techniques are used on different kinds of malware.

The malware that lies "underneath" may have virtually any purpose. Alerts from your security software might be the only symptom.


Prevention


Alert level: Severe
First detected by definition: 1.59.1404.0
Latest detected by definition: 1.151.1984.0 and higher
First detected on: Jun 17, 2009
This entry was first published on: Aug 27, 2009
This entry was updated on: Dec 29, 2014

This threat is also detected as:
No known aliases