Trojan

About “Trojan:Win32/Antavmu!pz” infection

Malware Removal

The Trojan:Win32/Antavmu!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Antavmu!pz virus can do?

  • Uses Windows utilities for basic functionality
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan:Win32/Antavmu!pz?


File Info:

name: F8BFCD57B41C353B390E.mlw
path: /opt/CAPEv2/storage/binaries/7ad180b5c346ca5ce4ffcedfbf7bef4280efc682dea567eccde83a0c669f1d36
crc32: 22B85FC5
md5: f8bfcd57b41c353b390e6d8eaf6716ed
sha1: 67d2164a153c4229c441f5e1dd9f40dc2c3b9253
sha256: 7ad180b5c346ca5ce4ffcedfbf7bef4280efc682dea567eccde83a0c669f1d36
sha512: decfc7e2e7b045cfca07463b4483250503b03f86833fa0380929b017b39c2534a26d61964668ed3273e85605a0e01a23dee6999618393c1b9eff6b30bc6f6dae
ssdeep: 1536:zvUdj6+7XGdjzOQA8AkqUhMb2nuy5wgIP0CSJ+5yPB8GMGlZ5G:zv7TyGdqU7uy5w9WMyPN5G
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1E883AF51B5F0D430E48485B68D6D6D73EE3FAE300B4B61779390A5A5DFF10A0AA0B36B
sha3_384: aada2674103a83453d8432a8826960a4dc7de94681e2228ce6c8f2abbf6a0f48a4a6409916b0332532b5138bc53312d8
ep_bytes: eb1066623a432b2b484f4f4b90e92811
timestamp: 2011-02-04 23:50:58

Version Info:

0: [No Data]

Trojan:Win32/Antavmu!pz also known as:

BkavW32.AIDetectMalware
ClamAVWin.Malware.Antavmu-9791257-0
CAT-QuickHealTrojan.AntavmuPMF.S19778283
SkyhighBehavesLike.Win32.Dropper.lh
McAfeeGenericRXHL-ZT!F8BFCD57B41C
MalwarebytesGeneric.Malware.AI.DDS
ZillyaTrojan.KillFiles.Win32.28987
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 001f4e2b1 )
K7GWTrojan ( 001f4e2b1 )
Cybereasonmalicious.a153c4
BitDefenderThetaAI:Packer.ED5D5D581E
VirITTrojan.Win32.Generic.AFFA
SymantecTrojan.Dropper
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/KillFiles.NEH
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan.Win32.KillFiles.dobe
BitDefenderGen:Trojan.FileInfector.eGW@aiJEZzn
NANO-AntivirusTrojan.Win32.MlwGen.dglwlg
MicroWorld-eScanGen:Trojan.FileInfector.eGW@aiJEZzn
RisingTrojan.Win32.Antavmu.d (CLASSIC)
TACHYONTrojan/W32.Agent.81408.AAO
SophosMal/Antavmu-A
F-SecureTrojan.TR/Crypt.ZPACK.Gen7
DrWebTrojan.MulDrop6.10374
VIPREGen:Trojan.FileInfector.eGW@aiJEZzn
Trapminemalicious.moderate.ml.score
FireEyeGeneric.mg.f8bfcd57b41c353b
EmsisoftGen:Trojan.FileInfector.eGW@aiJEZzn (B)
IkarusGen.Win32.FileInfector
JiangminTrojanDownloader.NSIS.ff
WebrootW32.Infector
VaristW32/Antavmu.C.gen!Eldorado
AviraTR/Crypt.ZPACK.Gen7
Antiy-AVLTrojan/Win32.SGeneric
Kingsoftmalware.kb.a.995
MicrosoftTrojan:Win32/Antavmu!pz
XcitiumTrojWare.Win32.KillFiles.NEH@4qfvz0
ArcabitTrojan.FileInfector.ECA2F2
SUPERAntiSpywareTrojan.Agent/Gen-Injector
ZoneAlarmTrojan.Win32.KillFiles.dobe
GDataGen:Trojan.FileInfector.eGW@aiJEZzn
GoogleDetected
AhnLab-V3Trojan/Win32.Antavmu.R25058
Acronissuspicious
VBA32BScope.Trojan.Downloader
MAXmalware (ai score=88)
DeepInstinctMALICIOUS
Cylanceunsafe
PandaTrj/Genetic.gen
TencentTrojan.Win32.Killfiles.wa
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Antavmu.JWS!tr
AVGWin32:TrojanX-gen [Trj]
AvastWin32:TrojanX-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Trojan:Win32/Antavmu!pz?

Trojan:Win32/Antavmu!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment