Categories: Trojan

Trojan.Win32.Antavmu.aaxp removal tips

The Trojan.Win32.Antavmu.aaxp is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Antavmu.aaxp virus can do?

At least one IP Address, Domain, or File Name was found in a crypto call
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Win32.Antavmu.aaxp?


File Info:
crc32: DD5F891Amd5: d557ed084adb35c4f3d81a5dd4525609name: D557ED084ADB35C4F3D81A5DD4525609.mlwsha1: 73c8d7421609e1d9ae697e6ba19850574a19572fsha256: d6230a3ec07693fba69738897a27fe5ab9c359ad1426e9188f88b5364d2747d1sha512: d55988e82bf6554b7619c34da2aa45e3ef14cc941c4048c923bd57caaac741cb3f7f9edc25a7f483d2681f263a714480306a3cad3b62c6df8dce09279c23e053ssdeep: 12288:vkyQZgSLw/MdKmUJLjdSCFdIwNQBSh8jxGfpGLNbVaQjPZaw:syygSLw/Hm0FFdIwWnYGZEQDNtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Trojan.Win32.Antavmu.aaxp also known as:

Lionic	Trojan.Win32.Antavmu.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Wsgame.22668
ALYac	Trojan.GenericKD.4249312
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
Baidu	Win32.Trojan.FakeIME.d
Cyren	W32/OnlineGames.HI.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/PSW.QQTen.NAN
APEX	Malicious
Avast	FileRepMalware
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Antavmu.aaxp
BitDefender	Trojan.GenericKD.4249312
NANO-Antivirus	Trojan.Win32.Wsgame.ejmxgz
MicroWorld-eScan	Trojan.GenericKD.4249312
Tencent	Win32.Trojan.Imeinject.Wqct
Ad-Aware	Trojan.GenericKD.4249312
Sophos	Generic ML PUA (PUA)
Comodo	Malware@#2gfoypu98m0ai
BitDefenderTheta	Gen:NN.ZexaF.34170.SGWba8rikElb
McAfee-GW-Edition	BehavesLike.Win32.Benjamin.bc
FireEye	Generic.mg.d557ed084adb35c4
Emsisoft	Trojan.GenericKD.4249312 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Heur:Backdoor/Blackhole
eGambit	Unsafe.AI_Score_100%
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Win32.Application.FlyStudio.F
TACHYON	Trojan/W32.Antavmu.721972
McAfee	Artemis!D557ED084ADB
MAX	malware (ai score=88)
VBA32	Backdoor.Rbot
Panda	Trj/CI.A
Ikarus	Trojan.Win32.PSW
AVG	FileRepMalware
Paloalto	generic.ml