Trojan.Win32.Witch.ivj removal tips

The Trojan.Win32.Witch.ivj is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Witch.ivj virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Trojan.Win32.Witch.ivj?


File Info:
name: CFE6D4C019A7C3E6C2DF.mlw
path: /opt/CAPEv2/storage/binaries/73c72564976049fc3c6890cd829768bf6a1264d9c07647b714685798a2ad0e91
crc32: 1A993B28
md5: cfe6d4c019a7c3e6c2df7167d0c2edf5
sha1: 3bbdeee3435f05748d6a65ddc03b7aa663eb56d8
sha256: 73c72564976049fc3c6890cd829768bf6a1264d9c07647b714685798a2ad0e91
sha512: d51fd78f6f191a685b27c8ca279b840bd57c5783b32f7e49853b3abd7fb11d37630ddc77a1626228da4d6462b1f4e2e67cae7614b4368cf2ff2d541d29182225
ssdeep: 768:J1113VUwg1111111111gn1w0lnLaPglbAoj3yfeyZyuBlh/yhtWPSZHHprarzE9F:TWwbOOnLhU0CfeUJStYYHHproA9P
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19643C01AD5E50895E9C72F3C440AAF9DBE1E6CF11C7B623A226430A4F82D917FDD0963
sha3_384: 3a960c9a05d9edfb97321aece4f087aa8a266a73026466a518387b9e87952abb793ba10c4c9d9122d4bbc710760395ea
ep_bytes: 64a13000000083c000fc80e7fffc5299
timestamp: 2011-01-29 20:49:26

Version Info:
0: [No Data]

Trojan.Win32.Witch.ivj also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Midie.47122
FireEye	Generic.mg.cfe6d4c019a7c3e6
CAT-QuickHeal	Trojan.IgenericRI.S26222255
ALYac	Gen:Variant.Midie.47122
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 0058dc961 )
BitDefender	Gen:Variant.Midie.47122
K7GW	Trojan ( 0058dc961 )
Cybereason	malicious.019a7c
BitDefenderTheta	AI:Packer.E4B258BE1E
Cyren	W32/Cosmu.K.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Agent.OKR
APEX	Malicious
ClamAV	Win.Malware.Midie-9936226-0
Kaspersky	Trojan.Win32.Witch.ivj
NANO-Antivirus	Virus.Win32.Gen.ccmw
Rising	Malware.Heuristic!ET#90% (RDMK:cmRtazoP7GWS/kTgKHBn7UPPqWJA)
Sophos	Mal/Generic-R + Mal/Inject-CG
DrWeb	Trojan.Siggen16.39130
TrendMicro	TROJ_KRYPTK.SM10
McAfee-GW-Edition	BehavesLike.Win32.Generic.qh
Emsisoft	Gen:Variant.Midie.47122 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Crypt.ZPACK.Gen
MAX	malware (ai score=87)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
ZoneAlarm	Trojan.Win32.Witch.ivj
GData	Gen:Variant.Midie.47122
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Gampass.R467614
McAfee	GenericRXAA-AA!CFE6D4C019A7
VBA32	Malware-Cryptor.Win32.General.4
Malwarebytes	Malware.AI.3766743511
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_KRYPTK.SM10
Yandex	Trojan.GenAsa!g4uRYh33TJE
Ikarus	Trojan.Win32.Cosmu
Fortinet	W32/Cosmu.AO!tr
AVG	Win32:Agent-AMRX [Trj]
Avast	Win32:Agent-AMRX [Trj]
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Trojan.Win32.Witch.ivj?

Trojan.Win32.Witch.ivj removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X