Trojan:Win32/Arvid.A!dha removal instruction

The Trojan:Win32/Arvid.A!dha is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Arvid.A!dha virus can do?

Unconventionial language used in binary resources: Arabic (Saudi Arabia)
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan:Win32/Arvid.A!dha?


File Info:
name: D7341D147C8D63137ED7.mlw
path: /opt/CAPEv2/storage/binaries/4ec489e722b0ddc3b36fcc5381d80aaaaf245e2b34477d013938a1911af1fb4c
crc32: EA81369D
md5: d7341d147c8d63137ed7a0b365ccc56e
sha1: 31fd192f56a008dc375771f8a6fcf0fe7b885fa9
sha256: 4ec489e722b0ddc3b36fcc5381d80aaaaf245e2b34477d013938a1911af1fb4c
sha512: e1d5264a64a96a2d3b9d34d251460006f89ec2049735a6b05aeb1399bc950f3207e5bbf0c5d26d43bc0f89fa20f20281347ea59b72b34569c53f4e754c41d956
ssdeep: 6144:JU4qyhxkic8+h0yttO87QxHKWE8j7aULRFMGcGAx/L:JUIXwh0YWEy7ayF
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T100748D1177A0C832C25631778C5AC776BBA9B1309F2992C7BBD41B7EDE742D29938306
sha3_384: 13c54c71654a96226d1fa2289767251584a6108e36f95735ccdf478382ad16ea23d39b076432d72825af166e996ca1a1
ep_bytes: e862cf0000e978feffff6a0c68289543
timestamp: 2014-09-24 08:52:39

Version Info:
0: [No Data]

Trojan:Win32/Arvid.A!dha also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.DesertFalcons.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Jaik.88223
FireEye	Generic.mg.d7341d147c8d6313
ALYac	Gen:Variant.Jaik.88223
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Trojan.Agent.Win32.489467
Sangfor	Spyware.Win32.Agent.8
K7AntiVirus	Spyware ( 004b16c91 )
Alibaba	TrojanSpy:Win32/Arvid.2fb0eaee
K7GW	Spyware ( 004b16c91 )
Cybereason	malicious.47c8d6
Cyren	W32/Agent.EUP.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Spy.Agent.OIB
APEX	Malicious
ClamAV	Win.Dropper.Fcmp-9877153-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Jaik.88223
NANO-Antivirus	Trojan.Win32.Strictor.dftadm
Avast	Win32:DesertFalcon-L [Spy]
Tencent	Malware.Win32.Gencirc.10b9e55d
TACHYON	Trojan/W32.DesertFalcons.367616.B
Sophos	Mal/Generic-R
F-Secure	Trojan.TR/Agent.367616.77
DrWeb	Trojan.DownLoader12.25768
VIPRE	Gen:Variant.Jaik.88223
TrendMicro	TSPY_FAKEDOC.UKH
McAfee-GW-Edition	BehavesLike.Win32.NetLoader.fm
Emsisoft	Gen:Variant.Jaik.88223 (B)
GData	Gen:Variant.Jaik.88223
Jiangmin	Trojan.DesertWind.l
Avira	TR/Agent.367616.77
Antiy-AVL	Trojan[APT]/Win32.Desertfalcon
Arcabit	Trojan.Jaik.D1589F
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/Arvid.A!dha
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.C412392
Acronis	suspicious
McAfee	BackDoor-FCMP!D7341D147C8D
MAX	malware (ai score=100)
VBA32	TrojanSpy.Agent
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TSPY_FAKEDOC.UKH
Rising	Spyware.Agent!8.C6 (TFE:5:5nOJYeb58yK)
Yandex	Trojan.DesertFalcons!U84/ZRpCOvE
Ikarus	Trojan-Spy.Win32.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.ONO!tr
BitDefenderTheta	Gen:NN.ZexaF.36350.wqW@aq6hn6jO
AVG	Win32:DesertFalcon-L [Spy]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Trojan:Win32/Arvid.A!dha?

Trojan:Win32/Arvid.A!dha removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X