Win32:Patched-AWW [Trj] removal tips

The Win32:Patched-AWW [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32:Patched-AWW [Trj] virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Win32:Patched-AWW [Trj]?

File Info:
name: 533DE1EE9221FEED13FF.mlw
path: /opt/CAPEv2/storage/binaries/c71aefeeec55f2c88502299424e8452ff7eccab6a3f7ec00b32697a5ee569bbc
crc32: 08355754
md5: 533de1ee9221feed13ffc26d698e3031
sha1: 582a3098277a22341bcddd8d6a89e593bd2b6c74
sha256: c71aefeeec55f2c88502299424e8452ff7eccab6a3f7ec00b32697a5ee569bbc
sha512: 2c11fc1311793b8fa86bbb18fb12828688b08d7c39ed12af99b56b1ed95bd6dfaabf17ebe45492be78de6a0c43130a91fec93eed7b9bec670247a9c6038800fa
ssdeep: 6144:+XaPyLUjD5xiv98sSTsAQh96Aku+xYub241pfvoaMOJTu1LL5:+X3UjD5xiv95ST29djS2qvoF3L
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15254D001AB324C59F7960731183A3FA35D9EECB6501FF86E0213F966E472661BFB9601
sha3_384: 1e848bd96567204e56446daf1bdd3797ca9a8f24f21a99e5a9a7947817de4102d5d8d54cc5b639c06d1a888c355b030c
ep_bytes: 81ecd40200005356576a205f33db6801
timestamp: 2021-07-24 20:29:51

Version Info:
CompanyName: Mozilla Corporation
FileDescription: Firefox Helper
FileVersion: 108.0.2
LegalCopyright: Mozilla Corporation
OriginalFilename: helper.exe
ProductName: Firefox
ProductVersion: 108.0.2
Translation: 0x0409 0x04b0

Win32:Patched-AWW [Trj] also known as:

How to remove Win32:Patched-AWW [Trj]?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.