Trojan

Trojan.AntavmuPMF.S31541431 removal tips

Malware Removal

The Trojan.AntavmuPMF.S31541431 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.AntavmuPMF.S31541431 virus can do?

  • Uses Windows utilities for basic functionality
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan.AntavmuPMF.S31541431?


File Info:

name: 76D008C5A11CE4262FE0.mlw
path: /opt/CAPEv2/storage/binaries/b9c02a72bffafbd2c18c921403cd53bbd91e73d1f0d2db6ad2740edf70e509aa
crc32: 1742D4DE
md5: 76d008c5a11ce4262fe04567566ba899
sha1: 3db117e94079383fc2a215dbdee3ac21f2df6bbf
sha256: b9c02a72bffafbd2c18c921403cd53bbd91e73d1f0d2db6ad2740edf70e509aa
sha512: 57fbb190d756b5c119ff9c071f4660c1aa39def85ef2b6097b8a160b1195a0a63d5afe81d3acbf0c3c4317956ae38c765e5af58acbe66255b9494bd5d3fbbbea
ssdeep: 1536:hbuZs2XvwmK5QPqfhVWbdsmA+RjPFLC+e5hAt0ZGUGf2g:hws2fwmNPqfcxA+HFshAtOg
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1AA73AE12B9D1C434F45481B25D3D6D73AE3EAA640A5792F79BD4F1A4CEF01D0AA0B32B
sha3_384: f6ae6792ac9142b00302df0d745fdd0515de7faf1e41b21e922a72e6789907609fa0350a032da638be37750d997a26c7
ep_bytes: a11bf14000c1e002a31ff14000526a00
timestamp: 2011-01-11 01:44:56

Version Info:

0: [No Data]

Trojan.AntavmuPMF.S31541431 also known as:

BkavW32.AIDetectMalware
LionicVirus.DOS.Moctezuma.tnBC
MicroWorld-eScanGen:Trojan.FileInfector.eGW@aKDb32o
FireEyeGeneric.mg.76d008c5a11ce426
CAT-QuickHealTrojan.AntavmuPMF.S31541431
SkyhighBehavesLike.Win32.Generic.lh
ALYacGen:Trojan.FileInfector.eGW@aKDb32o
Cylanceunsafe
ZillyaTrojan.KillFiles.Win32.63569
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 001f4e2b1 )
AlibabaMalware:Win32/km_2242df.None
K7GWTrojan ( 001f4e2b1 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaAI:Packer.2D4DD5B71E
VirITTrojan.Win32.Generic.ABFQ
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/KillFiles.NEH
APEXMalicious
TrendMicro-HouseCallTROJ_GEN.R002C0DAT24
ClamAVWin.Malware.Poison-10016370-0
KasperskyUDS:Trojan.Win32.Generic
BitDefenderGen:Trojan.FileInfector.eGW@aKDb32o
NANO-AntivirusTrojan.Win32.Antavmu.dhwgp
AvastWin32:TrojanX-gen [Trj]
RisingTrojan.Win32.Antavmu.b (CLASSIC)
TACHYONTrojan/W32.Antavmu.74752.E
EmsisoftGen:Trojan.FileInfector.eGW@aKDb32o (B)
F-SecureTrojan.TR/Antavmu.doena
DrWebTrojan.Siggen8.42052
VIPREGen:Trojan.FileInfector.eGW@aKDb32o
TrendMicroTROJ_GEN.R002C0DAT24
Trapminemalicious.high.ml.score
SophosMal/Antavmu-A
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.hrpwg
GoogleDetected
AviraTR/Antavmu.doena
VaristW32/Antavmu.D.gen!Eldorado
Antiy-AVLTrojan/Win32.KillFiles
Kingsoftmalware.kb.a.993
ArcabitTrojan.FileInfector.EC4F1B
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataWin32.Trojan.Antavmu.A
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Antavmu.R25058
McAfeePWS-OnlineGames.kz
MAXmalware (ai score=80)
VBA32BScope.Trojan.Downloader
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
TencentTrojan.Win32.Agent.mgr
YandexTrojan.GenAsa!mLg/yf6hjK0
IkarusTrojan.Win32.Antavmu
MaxSecureTrojan.Malware.3411146.susgen
FortinetW32/KillFiles.NEH!tr
AVGWin32:TrojanX-gen [Trj]
Cybereasonmalicious.940793
DeepInstinctMALICIOUS

How to remove Trojan.AntavmuPMF.S31541431?

Trojan.AntavmuPMF.S31541431 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment