Win32:Patched-AWW [Trj] removal instruction

The Win32:Patched-AWW [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:Patched-AWW [Trj] virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Win32:Patched-AWW [Trj]?


File Info:
name: 520A02ABE682D91D8545.mlw
path: /opt/CAPEv2/storage/binaries/bb75c2d36e176381870ba37e6b270b09712a3c83c8b9a777556103d948467998
crc32: 5E3FB423
md5: 520a02abe682d91d8545415e35f9f814
sha1: a85e4952676c9060e12cf35f41eebd0edcb99893
sha256: bb75c2d36e176381870ba37e6b270b09712a3c83c8b9a777556103d948467998
sha512: 54fa80b3f2a9ea1008f4c1fb1cc006205f53d73a1f1418f3195865c2b3a3fbda944a1069297528984a5ed67f99f06363fbe975b66c4a69ddf66b8538c68f2493
ssdeep: 6144:HEQgKTBKkR+PKn3zSMhYW/vxA1dmvOzeTFsHYyz:HEQgKTnFGMfmP6EepyF
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19F64E191F94EA46AE2F95AF21D5925CFAB75492D5561B0198F0BCBC13F03FB0C32848B
sha3_384: 4117e4af356cbdf06e971910de1be66429482c53f6deca7195cb1ffec9c68547dc3dc27a040757bbf9b31c7457d162a9
ep_bytes: 6a746898af4000e8db02000033db895d
timestamp: 2008-05-30 18:53:29

Version Info:
0: [No Data]

Win32:Patched-AWW [Trj] also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Zusy.486656
Skyhigh	BehavesLike.Win32.Xpaj.fc
Malwarebytes	MachineLearning/Anomalous.96%
BitDefender	Gen:Variant.Zusy.486656
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Patched.JD
APEX	Malicious
Kaspersky	Virus.Win32.Senoval.a
NANO-Antivirus	Virus.Win32.Gen-Crypt.ccnc
Rising	Trojan.Generic@AI.100 (RDML:NEePeLLQ6co1gCmXNHLVxA)
TACHYON	Trojan/W32.Agent.311296.APR
Sophos	ML/PE-A
VIPRE	Gen:Variant.Zusy.486656
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.520a02abe682d91d
Emsisoft	Gen:Variant.Zusy.486656 (B)
Google	Detected
Varist	W32/Convagent.DM.gen!Eldorado
Antiy-AVL	Trojan/Win32.Patched
Kingsoft	malware.kb.a.770
Microsoft	Trojan:Win32/Doina.RPX!MTB
Arcabit	Trojan.Zusy.D76D00
ZoneAlarm	Virus.Win32.Senoval.a
GData	Gen:Variant.Zusy.486656
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Generic.R604425
ALYac	Gen:Variant.Zusy.486656
MAX	malware (ai score=80)
VBA32	BScope.Backdoor.Convagent
Tencent	Trojan.Win32.Pathced_ya.16001052
Ikarus	Trojan.Win32.Patched
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	Adware/Adware_AGen
AVG	Win32:Patched-AWW [Trj]
Avast	Win32:Patched-AWW [Trj]
CrowdStrike	win/malicious_confidence_70% (D)

How to remove Win32:Patched-AWW [Trj]?

Win32:Patched-AWW [Trj] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X