Trojan

Trojan.Win32.AntiAV.czed malicious file

Malware Removal

The Trojan.Win32.AntiAV.czed is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.AntiAV.czed virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Win32.AntiAV.czed?


File Info:

crc32: D50FB68E
md5: 590ff9abf64066378329275ebf3a9865
name: 590FF9ABF64066378329275EBF3A9865.mlw
sha1: e11c5e5f49710211166736ffa0a24e7bf09762be
sha256: 1d5a268e117b92fd4ee59757939ecc3c2915906721839ba06755a64e3bf8589e
sha512: 15040abcbd9f8641163efbf3584848b6bbee1b39d1af8f7ffb108fd191592e4081e94605aa6bea12b75fbff0e9c2512e318dc0fd07fde95da501f9212a385e3a
ssdeep: 98304:a6aj1GwIrk6FXKIFei3fX0yVZqgAk0X7rxz3JihDWlIsb0XoWIO3CueIYfV/wL6:jaj1GlZxFeieZ9XfxtibXZ+nIYf/Dfn
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: Copyright (C) 2019, matrix
InternalName: reboot.exe
FileVersion: 1.0.5.4
ProductVersion: 1.7.6
Translation: 0x0409 0x04e8

Trojan.Win32.AntiAV.czed also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.45044661
FireEyeGeneric.mg.590ff9abf6406637
McAfeeGenericRXNB-BK!590FF9ABF640
CylanceUnsafe
AegisLabTrojan.Win32.Malicious.4!c
SangforMalware
K7AntiVirusTrojan ( 00574db21 )
BitDefenderTrojan.GenericKD.45044661
K7GWTrojan ( 00574db21 )
Cybereasonmalicious.f49710
CyrenW32/Trojan.JMIV-6945
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:DropperX-gen [Drp]
KasperskyTrojan.Win32.AntiAV.czed
AlibabaTrojan:Win32/AntiAV.c9cc20a6
ViRobotTrojan.Win32.Z.Kryptik.4420096.D
Ad-AwareTrojan.GenericKD.45044661
SophosMal/Generic-S
F-SecureTrojan.TR/AD.GoCloudnet.tugmz
DrWebTrojan.PWS.Siggen2.60881
McAfee-GW-EditionBehavesLike.Win32.Trojan.rc
EmsisoftTrojan.Crypt (A)
IkarusTrojan.Win32.Krypt
WebrootW32.Trojan.Gen
AviraTR/AD.GoCloudnet.tugmz
MAXmalware (ai score=83)
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/Glupteba.NP!MTB
GridinsoftTrojan.Win32.Kryptik.oa
ArcabitTrojan.Generic.D2AF53B5
ZoneAlarmTrojan.Win32.AntiAV.czed
GDataTrojan.GenericKD.45044661
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.RL_Agent.R359027
Acronissuspicious
VBA32BScope.Backdoor.Agent
ALYacTrojan.GenericKD.45044661
MalwarebytesTrojan.MalPack
PandaTrj/RnkBend.A
ESET-NOD32a variant of Win32/Kryptik.HIHM
RisingTrojan.Ransom.GlobeImposter!1.AF70 (TFE:5:bYXJg1YG3DR)
YandexTrojan.GenAsa!A3rOJaxYS2w
SentinelOneStatic AI – Malicious PE
FortinetW32/Kryptik.HIFA!tr
BitDefenderThetaGen:NN.ZexaF.34700.@pKfaW@U02
AVGWin32:DropperX-gen [Drp]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_90% (D)
Qihoo-360Win32/Trojan.Anti.39c

How to remove Trojan.Win32.AntiAV.czed?

Trojan.Win32.AntiAV.czed removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment