Trojan

Trojan:Win32/Antavmu!pz removal tips

Malware Removal

The Trojan:Win32/Antavmu!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Antavmu!pz virus can do?

  • Uses Windows utilities for basic functionality
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan:Win32/Antavmu!pz?


File Info:

name: 5BACC9ED4D31B1D2EED0.mlw
path: /opt/CAPEv2/storage/binaries/e132a9fff8800aab7833847b5a0b9d920c5294928f6b6bc0d0bc8ac2663594d2
crc32: 474E2E0C
md5: 5bacc9ed4d31b1d2eed01523b137b0e3
sha1: 2b36e748e068782e1314f546fd0001ce22c5780a
sha256: e132a9fff8800aab7833847b5a0b9d920c5294928f6b6bc0d0bc8ac2663594d2
sha512: 5474a199c5f09fb5c474d629bb4b98c33a82dd011e854486b7fa144c40050fbe570f321100c31fd4e605ffe685bd3a07b6fd35c07d384040470601b2871064aa
ssdeep: 1536:hb7nBr6k84jyqPdK5QPqfhVWbdsmA+RjPFLC+e5hz0ZGUGf2g:h3V5XLNPqfcxA+HFshzOg
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T15773AF62B8D1C434E44485B29D3C5D73EE3EAA540B5792F79B94F5A8CEF01D09A0A32B
sha3_384: 7ae88e17d15107e2b14277d489053bfe836ea90621186e20891f70e718669ed6b829014063f6d4b9bfc73262cec16ee8
ep_bytes: a11bf14000c1e002a31ff14000526a00
timestamp: 2011-01-11 01:44:56

Version Info:

0: [No Data]

Trojan:Win32/Antavmu!pz also known as:

BkavW32.AIDetectMalware
LionicVirus.DOS.Moctezuma.tnBC
MicroWorld-eScanGen:Trojan.FileInfector.eGW@aKDb32o
ClamAVWin.Malware.Poison-10016370-0
FireEyeGeneric.mg.5bacc9ed4d31b1d2
CAT-QuickHealTrojan.AntavmuPMF.S31541431
SkyhighBehavesLike.Win32.Generic.lh
ALYacGen:Trojan.FileInfector.eGW@aKDb32o
Cylanceunsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaMalware:Win32/km_2242df.None
K7GWTrojan ( 001f4e2b1 )
K7AntiVirusTrojan ( 001f4e2b1 )
BitDefenderThetaAI:Packer.2D4DD5B71E
VirITTrojan.Win32.Generic.ABFQ
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/KillFiles.NEH
APEXMalicious
CynetMalicious (score: 100)
KasperskyUDS:Trojan.Win32.Generic
BitDefenderGen:Trojan.FileInfector.eGW@aKDb32o
NANO-AntivirusTrojan.Win32.Antavmu.dhwgp
AvastWin32:TrojanX-gen [Trj]
TencentTrojan.Win32.Agent.mgr
SophosMal/Antavmu-A
F-SecureTrojan.TR/Antavmu.doena
DrWebTrojan.Siggen8.42052
VIPREGen:Trojan.FileInfector.eGW@aKDb32o
TrendMicroTROJ_GEN.R002C0DA424
Trapminemalicious.high.ml.score
EmsisoftGen:Trojan.FileInfector.eGW@aKDb32o (B)
IkarusTrojan.Win32.Antavmu
GDataWin32.Trojan.Antavmu.A
JiangminTrojan.Generic.hrpwg
GoogleDetected
AviraTR/Antavmu.doena
Antiy-AVLTrojan/Win32.KillFiles
Kingsoftmalware.kb.a.994
XcitiumTrojWare.Win32.KillFiles.NEH@4qfvz0
ArcabitTrojan.FileInfector.EC4F1B
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftTrojan:Win32/Antavmu!pz
VaristW32/Antavmu.D.gen!Eldorado
AhnLab-V3Trojan/Win32.Antavmu.R25058
McAfeePWS-OnlineGames.kz
TACHYONTrojan/W32.Antavmu.74752.E
VBA32BScope.Trojan.Downloader
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0DA424
RisingTrojan.Win32.Antavmu.b (CLASSIC)
YandexTrojan.GenAsa!mLg/yf6hjK0
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.3411146.susgen
FortinetW32/KillFiles.NEH!tr
AVGWin32:TrojanX-gen [Trj]
Cybereasonmalicious.8e0687
DeepInstinctMALICIOUS

How to remove Trojan:Win32/Antavmu!pz?

Trojan:Win32/Antavmu!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment