Trojan

Trojan.AntiAV removal tips

Malware Removal

The Trojan.AntiAV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.AntiAV virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Latvian
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.AntiAV?


File Info:

crc32: D5A6DE9F
md5: 314a961bfa3d530765499fd5f4e18f04
name: 314A961BFA3D530765499FD5F4E18F04.mlw
sha1: 43bd83c82aff83d5c35b84202a43f4b48918eb33
sha256: 294915c9007c36c885bf53a69d6a11136b2ce6ec0602bcb3ebe76057de862721
sha512: 2129dfa39d1bc05bcc68a5540ce204710897436c71c9f30a6426feb13cd3cc00e2b3db70ba29507e3a3dea88da589640159f02173b9664f626c79618465ed663
ssdeep: 98304:OO+IIeyKkR9ngXavv8GafyKhrW8y6h0I5+sS1/FeR52MF:zfyKayw8tThrW+1+vbP
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

InternalName: bomgpiaruci.iwa
ProductVersion: 15.54.32.31
Copyright: Copyrighz (C) 2021, fudkagat
Translation: 0x0115 0x046a

Trojan.AntiAV also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 00589d2d1 )
LionicTrojan.Win32.SmartFortress.lEDV
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealTrojan.AntiAV
ALYacTrojan.GenericKD.47418789
CylanceUnsafe
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaRansom:Win32/StopCrypt.66360928
K7GWTrojan ( 00589d2d1 )
CyrenW32/Kryptik.FOQ.gen!Eldorado
SymantecPacked.Generic.528
ESET-NOD32a variant of Win32/Kryptik.HNEE
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
ClamAVWin.Trojan.Generic-9906221-0
KasperskyHEUR:Trojan.Win32.AntiAV.gen
BitDefenderTrojan.GenericKD.47418789
MicroWorld-eScanTrojan.GenericKD.47418789
TencentWin32.Trojan.Kryptik.Lgtm
Ad-AwareTrojan.GenericKD.47418789
SophosMal/Generic-R + Troj/Krypt-BO
Comodofls.noname@0
BitDefenderThetaGen:NN.ZexaF.34294.@x0@aquT66aI
TrendMicroTROJ_GEN.R002C0DK521
McAfee-GW-EditionBehavesLike.Win32.Lockbit.rc
FireEyeGeneric.mg.314a961bfa3d5307
EmsisoftTrojan.Crypt (A)
SentinelOneStatic AI – Malicious PE
AviraTR/Crypt.Agent.fjoyc
eGambitUnsafe.AI_Score_98%
Antiy-AVLTrojan/Generic.ASMalwS.34C770C
MicrosoftRansom:Win32/StopCrypt.MSK!MTB
GDataTrojan.GenericKD.47418789
AhnLab-V3Packed/Win.GDV.R448534
McAfeePacked-GDT!314A961BFA3D
MAXmalware (ai score=88)
VBA32Malware-Cryptor.2LA.gen
MalwarebytesTrojan.MalPack.GS
PandaTrj/Agent.ALS
TrendMicro-HouseCallTROJ_GEN.R002C0DK521
RisingTrojan.Kryptik!1.DAA2 (CLASSIC)
YandexTrojan.Kryptik!tfzjims0obY
IkarusTrojan-Ransom.StopCrypt
FortinetW32/Kryptik.FQN!tr
AVGWin32:TrojanX-gen [Trj]
Paloaltogeneric.ml

How to remove Trojan.AntiAV?

Trojan.AntiAV removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment