Trojan.Win32.Antavmu.aaxp removal tips

The Trojan.Win32.Antavmu.aaxp is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Antavmu.aaxp virus can do?

At least one IP Address, Domain, or File Name was found in a crypto call
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Win32.Antavmu.aaxp?


File Info:
crc32: DD5F891A
md5: d557ed084adb35c4f3d81a5dd4525609
name: D557ED084ADB35C4F3D81A5DD4525609.mlw
sha1: 73c8d7421609e1d9ae697e6ba19850574a19572f
sha256: d6230a3ec07693fba69738897a27fe5ab9c359ad1426e9188f88b5364d2747d1
sha512: d55988e82bf6554b7619c34da2aa45e3ef14cc941c4048c923bd57caaac741cb3f7f9edc25a7f483d2681f263a714480306a3cad3b62c6df8dce09279c23e053
ssdeep: 12288:vkyQZgSLw/MdKmUJLjdSCFdIwNQBSh8jxGfpGLNbVaQjPZaw:syygSLw/Hm0FFdIwWnYGZEQDN
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Trojan.Win32.Antavmu.aaxp also known as:

Lionic	Trojan.Win32.Antavmu.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Wsgame.22668
ALYac	Trojan.GenericKD.4249312
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
Baidu	Win32.Trojan.FakeIME.d
Cyren	W32/OnlineGames.HI.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/PSW.QQTen.NAN
APEX	Malicious
Avast	FileRepMalware
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Antavmu.aaxp
BitDefender	Trojan.GenericKD.4249312
NANO-Antivirus	Trojan.Win32.Wsgame.ejmxgz
MicroWorld-eScan	Trojan.GenericKD.4249312
Tencent	Win32.Trojan.Imeinject.Wqct
Ad-Aware	Trojan.GenericKD.4249312
Sophos	Generic ML PUA (PUA)
Comodo	Malware@#2gfoypu98m0ai
BitDefenderTheta	Gen:NN.ZexaF.34170.SGWba8rikElb
McAfee-GW-Edition	BehavesLike.Win32.Benjamin.bc
FireEye	Generic.mg.d557ed084adb35c4
Emsisoft	Trojan.GenericKD.4249312 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Heur:Backdoor/Blackhole
eGambit	Unsafe.AI_Score_100%
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Win32.Application.FlyStudio.F
TACHYON	Trojan/W32.Antavmu.721972
McAfee	Artemis!D557ED084ADB
MAX	malware (ai score=88)
VBA32	Backdoor.Rbot
Panda	Trj/CI.A
Ikarus	Trojan.Win32.PSW
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Trojan.Win32.Antavmu.aaxp?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Win32.Antavmu.aaxp removal tips