Trojan.Win32.AntiAV.czeh removal guide

The Trojan.Win32.AntiAV.czeh is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.AntiAV.czeh virus can do?

Executable code extraction
Creates RWX memory
Unconventionial binary language: Russian
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Win32.AntiAV.czeh?


File Info:
crc32: 4C0CD116
md5: 203dbd1520b7d01b3d497ee01163cc85
name: 203DBD1520B7D01B3D497EE01163CC85.mlw
sha1: 78cbd34ceeba61822213f90dbd457c37e0b9a629
sha256: ae8fa3b5a31d3844159b3812cc7e6b3eae8d3b0f31933bb18809de745e291f8f
sha512: 9c73286040de6c2224f3397a9d7666ce04e62bcd66eb6125e5ea01287f1d05f64b872247c38ef09af56e1b04f53125d62b568ffd05d1cb9069f363dc864bd524
ssdeep: 98304:cngBrGZAct+3LDJGG1Ikcv3DyW4tT6/RUldvzHktnmnDrFL/Mt1+dWChHKw4uSe:OwrGyF3L/QPJtRUPprFG+hhqDyjsvjy
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: Copyright (C) 2019, matrix
InternalName: reboot.exe
FileVersion: 1.0.5.4
ProductVersion: 1.7.6
Translation: 0x0419 0x04e8

Trojan.Win32.AntiAV.czeh also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.45047103
FireEye	Generic.mg.203dbd1520b7d01b
ALYac	Trojan.GenericKD.45047103
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 00574db21 )
BitDefender	Trojan.GenericKD.45047103
K7GW	Trojan ( 00574db21 )
Cybereason	malicious.ceeba6
Cyren	W32/Trojan.SZYZ-1822
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
ClamAV	Win.Malware.Generic-9811131-0
Kaspersky	Trojan.Win32.AntiAV.czeh
Alibaba	Trojan:Win32/AntiAV.de2895bf
Rising	Trojan.Ransom.GlobeImposter!1.AF70 (TFE:5:bYXJg1YG3DR)
Ad-Aware	Trojan.GenericKD.45047103
Emsisoft	Trojan.Crypt (A)
Comodo	Malware@#qv5o0zdzutzh
F-Secure	Trojan.TR/AD.GoCloudnet.grojy
DrWeb	Trojan.Siggen11.55727
TrendMicro	TrojanSpy.Win32.ANTIAV.USMANLH20
McAfee-GW-Edition	BehavesLike.Win32.Trojan.rc
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Crypt
Webroot	W32.Trojan.Gen
Avira	TR/AD.GoCloudnet.grojy
MAX	malware (ai score=83)
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Glupteba.NP!MTB
Gridinsoft	Trojan.Win32.Kryptik.oa
Arcabit	Trojan.Generic.D2AF5D3F
ZoneAlarm	Trojan.Win32.AntiAV.czeh
GData	Trojan.GenericKD.45047103
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Agent.R358738
Acronis	suspicious
McAfee	GenericRXAA-AA!203DBD1520B7
Malwarebytes	Trojan.MalPack.GS
Panda	Trj/RnkBend.A
ESET-NOD32	a variant of Win32/Kryptik.HIHM
TrendMicro-HouseCall	TrojanSpy.Win32.ANTIAV.USMANLH20
Yandex	Trojan.GenAsa!A3rOJaxYS2w
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Kryptik.HIFA!tr
BitDefenderTheta	Gen:NN.ZexaF.34700.@pKfaCt8ssb
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	Generic/HEUR/QVM11.1.FBF5.Malware.Gen

How to remove Trojan.Win32.AntiAV.czeh?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Win32.AntiAV.czeh removal guide