Trojan:Win32/Antivm.YD!MTB removal guide

The Trojan:Win32/Antivm.YD!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Antivm.YD!MTB virus can do?

Executable code extraction
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan:Win32/Antivm.YD!MTB?


File Info:
crc32: 1DE344F2
md5: 0c64952c1bcd2e61374edf5a8548e197
name: 0C64952C1BCD2E61374EDF5A8548E197.mlw
sha1: 004d0d4de1d22d23b150987e35c7be45e9776062
sha256: 69f05b95b370b5679dcc7a52f179ba9bc8842afdd8c314fc3037864cd19bb680
sha512: 346a26efd88f0175623abc91172678918f86a2f7be14bebf0c08d1461a14ffab89e8ea0739ec33b2edeaefd3d13cc7a0bd95a99d50ce22841fe988370c9e92f0
ssdeep: 3072:NAQsUudeMtWy5amTmZ0LpuvvOd57W7Nh+WqJiizHc4NAxqvqGQYYfZxV:NAQbtiWvw1uvWz7WSXzHc4NGMSY
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: 1
FileVersion: 1.00
CompanyName: intel
ProductName: xpAddressBook
ProductVersion: 1.00
OriginalFilename: 1.exe

Trojan:Win32/Antivm.YD!MTB also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Spyware ( 0056cb291 )
Lionic	Trojan.Win32.Agent.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen7.58863
Cynet	Malicious (score: 99)
CAT-QuickHeal	Trojan.AgentVMF.S10624680
ALYac	Trojan.Agent.DHRZ
Cylance	Unsafe
Zillya	Dropper.Agent.Win32.383436
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	TrojanSpy:Win32/Antivm.f18ef9c8
K7GW	Spyware ( 0056cb291 )
Cybereason	malicious.c1bcd2
Cyren	W32/Trojan.KPXK-4432
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/Spy.KeyLogger.NJK
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.Agent.qwhnpm
BitDefender	Trojan.Agent.DHRZ
NANO-Antivirus	Trojan.Win32.KeyLogger.fjsqvw
MicroWorld-eScan	Trojan.Agent.DHRZ
Tencent	Win32.Trojan.Agent.Gvk
Ad-Aware	Trojan.Agent.DHRZ
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZevbaF.34266.tm0@aWOh7bmi
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TSPY_VBKEYLOG.SM
McAfee-GW-Edition	GenericR-PEJ!0C64952C1BCD
FireEye	Generic.mg.0c64952c1bcd2e61
Emsisoft	Trojan.Agent.DHRZ (B)
Jiangmin	Trojan.Agent.citz
Avira	TR/Spy.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.28BF119
Microsoft	Trojan:Win32/Antivm.YD!MTB
GData	Trojan.Agent.DHRZ
AhnLab-V3	Trojan/Win32.Skeeyah.R242312
McAfee	GenericR-PEJ!0C64952C1BCD
MAX	malware (ai score=89)
VBA32	Trojan.Agent
Malwarebytes	Spyware.KeyLogger
Panda	Trj/CI.A
TrendMicro-HouseCall	TSPY_VBKEYLOG.SM
Rising	Stealer.Kutaki!1.C1C7 (CLASSIC)
Yandex	Trojan.GenAsa!f79NPhiSHgE
Ikarus	Trojan-Spy.Agent
MaxSecure	Trojan.Malware.73869913.susgen
Fortinet	W32/Spy.KEYLOGGER.NJK!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Trojan:Win32/Antivm.YD!MTB?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan:Win32/Antivm.YD!MTB removal guide