Trojan

Trojan.Win32.AntiAV.czdk removal tips

Malware Removal

The Trojan.Win32.AntiAV.czdk is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.AntiAV.czdk virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Anomalous binary characteristics

How to determine Trojan.Win32.AntiAV.czdk?


File Info:

crc32: 9AAA05C9
md5: c629a3ab7585ef681ff83e33bec0a7c2
name: C629A3AB7585EF681FF83E33BEC0A7C2.mlw
sha1: a86be49b9c14255acb080e488e6039392ddfa02e
sha256: 87feee97b4a063ccaba78ea40c36c55531726a1b4d9408a5484132486aa96087
sha512: 3a1bf6f741e667972bb5b5d38b7b685ea35f6c9cb5b39a899f7d77cef59445030daf8b8f58fa8806884874b3a62ba2f5cf63465269b2005224c61cf50af77135
ssdeep: 98304:nZOCFizQeBQUJGY2jVMBTGEj/WUpsCFjD17m7Jtz68a1dRI78u2hck+Ijy5apEW:ZOieBQOU4TlCEjD26z6wh/PphMdlPGW
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: Copyright (C) 2019, matrix
InternalName: reboot.exe
FileVersion: 1.0.5.4
ProductVersion: 1.7.6
Translation: 0x0841 0x04bb

Trojan.Win32.AntiAV.czdk also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.35732537
FireEyeGeneric.mg.c629a3ab7585ef68
ALYacTrojan.GenericKD.35732537
CylanceUnsafe
AegisLabTrojan.Win32.AntiAV.4!c
SangforMalware
K7AntiVirusTrojan ( 00574b9f1 )
BitDefenderTrojan.GenericKD.35732537
K7GWTrojan ( 00574b9f1 )
Cybereasonmalicious.b9c142
CyrenW32/Trojan.UDNF-9011
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Dropper.Bunitu-9811454-0
KasperskyTrojan.Win32.AntiAV.czdk
AlibabaTrojan:Win32/AntiAV.9fd1f657
Ad-AwareTrojan.GenericKD.35732537
SophosMal/Generic-S
F-SecureTrojan.TR/AD.GoCloudnet.fxmmb
DrWebTrojan.DownLoader36.28539
TrendMicroTrojanSpy.Win32.ANTIAV.USMANLG20
McAfee-GW-EditionBehavesLike.Win32.Trojan.rc
EmsisoftTrojan.Crypt (A)
IkarusTrojan.SuspectCRC
WebrootW32.Trojan.Gen
AviraTR/AD.GoCloudnet.fxmmb
MAXmalware (ai score=80)
KingsoftWin32.Troj.Antiav.Cz.(kcloud)
MicrosoftTrojan:Win32/Coroxy.MR!MTB
GridinsoftTrojan.Win32.Downloader.oa
ArcabitTrojan.Generic.D2213C39
ZoneAlarmTrojan.Win32.AntiAV.czdk
GDataTrojan.GenericKD.35732537
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.R358090
Acronissuspicious
McAfeeArtemis!C629A3AB7585
VBA32BScope.Exploit.Shellcode
MalwarebytesTrojan.MalPack.GS
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Kryptik.HIGQ
TrendMicro-HouseCallTrojanSpy.Win32.ANTIAV.USMANLG20
RisingTrojan.Ransom.GlobeImposter!1.AF70 (TFE:5:bYXJg1YG3DR)
YandexTrojan.GenAsa!A3rOJaxYS2w
SentinelOneStatic AI – Malicious PE
FortinetPossibleThreat.MU
BitDefenderThetaGen:NN.ZexaF.34700.@pKfaWp5xhg
AVGWin32:DropperX-gen [Drp]
AvastWin32:DropperX-gen [Drp]
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360Win32/Trojan.Anti.870

How to remove Trojan.Win32.AntiAV.czdk?

Trojan.Win32.AntiAV.czdk removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment