Skip to main content
Skip to main content
Microsoft Security Intelligence
Cart 0 items in shopping cart
Sign in
Published May 23, 2007 | Updated Sep 15, 2017

VirTool:WinNT/Mactu.A

Detected by Microsoft Defender Antivirus

Aliases: Rootkit:Win32.Agent.at (Kaspersky) PWS-Goldun.sys (McAfee) Win32/Starimp.D (CA) W32/Rootkit.CQ (Norman) Troj/Haxdor-Gen (Sophos) Rootkit.Win32.Agent.at (Sunbelt Software) Infostealer (Symantec) TROJ_ROOTKIT.AG (Trend Micro)

Summary

VirTool:WinNT/Mactu.A is a kernel-mode Trojan rootkit that hides files on an infected machine.
VirTool:WinNT/Mactu.A is a rootkit-enabled Trojan that employs stealth functionality to avoid user detection. The Trojan attempts to hide files it has used to infect your computer, thus manual removal is not recommended. To remove the Trojan, disconnect from the Internet and scan the system with up-to-date antivirus software. Do not reconnect your computer to the Internet until the computer is protected from re-infection. See the "Preventing Infection" section for more information.
Follow us