VHO:Trojan.Win32.Antavmu malicious file

The VHO:Trojan.Win32.Antavmu is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VHO:Trojan.Win32.Antavmu virus can do?

Executed a very long command line or script command which may be indicative of chained commands or obfuscation
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine VHO:Trojan.Win32.Antavmu?


File Info:
crc32: 410E1D99
md5: f3075dbe0cb909a5c59615f94c350f54
name: F3075DBE0CB909A5C59615F94C350F54.mlw
sha1: 2045deaaf4455974fadbf9a67657567327742195
sha256: c65085a77434b4ec27532815784df3eb875a3658920ac8a6fbf2aac79814cb04
sha512: a87ee85278613ff2d9b8ae723df77adb0864bd0f8203fabd5b0fbba1d46de43c88cea176a4d7e98e18bf35a719d960fee6751ded7895879f8cd3b9618f446b64
ssdeep: 3072:n582dzlrbZJSm618mW2eStYCoasrC1+DvQxztlY27VqmSVzyqYvd0bRPp24dfG+:n57lZJpG9eSHjdtlY27VqmSVzyqYvd0
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2020
InternalName: Tes.exe
FileVersion: 1.0.0.1
OriginalFilename: Tes.exe
ProductVersion: 1.0.0.1
Translation: 0x0409 0x04b0

VHO:Trojan.Win32.Antavmu also known as:

ALYac	Gen:Heur.Ransom.REntS.Gen.1
APEX	Malicious
Avast	Win32:RansomX-gen [Ransom]
Cynet	Malicious (score: 100)
Kaspersky	VHO:Trojan.Win32.Antavmu.gen
BitDefender	Gen:Heur.Ransom.REntS.Gen.1
MicroWorld-eScan	Gen:Heur.Ransom.REntS.Gen.1
Ad-Aware	Gen:Heur.Ransom.REntS.Gen.1
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZexaF.34110.ju0@auPCnini
TrendMicro	Ransom.Win32.RYUK.SMG
FireEye	Generic.mg.f3075dbe0cb909a5
Emsisoft	Gen:Heur.Ransom.REntS.Gen.1 (B)
Microsoft	Ransom:Win32/Ryuk.B
Arcabit	Trojan.Ransom.REntS.Gen.1
ZoneAlarm	HEUR:Trojan.Win32.AntiAV
GData	Gen:Heur.Ransom.REntS.Gen.1
AhnLab-V3	Ransomware/Win.RYUK.C4601283
McAfee	GenericRXAA-FA!F3075DBE0CB9
MAX	malware (ai score=87)
VBA32	BScope.Trojan.AntiAV
Malwarebytes	Ransom.Ryuk
TrendMicro-HouseCall	Ransom.Win32.RYUK.SMG
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:RansomX-gen [Ransom]

How to remove VHO:Trojan.Win32.Antavmu?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

VHO:Trojan.Win32.Antavmu malicious file