What is “Win32:Patched-AWW [Trj]”?

The Win32:Patched-AWW [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:Patched-AWW [Trj] virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32:Patched-AWW [Trj]?


File Info:
name: 98394D99E511AD35FA35.mlw
path: /opt/CAPEv2/storage/binaries/ebf5360c7c9a16dca244378dce1dcbd5c0611a3964b070b8efd3f5ccf1e4c3bf
crc32: 7A6DB66F
md5: 98394d99e511ad35fa35359dbabd7c06
sha1: a3ebc3b03a5395eea8ae229a8a3253a657bd8bf7
sha256: ebf5360c7c9a16dca244378dce1dcbd5c0611a3964b070b8efd3f5ccf1e4c3bf
sha512: 2a8ce2297a088588d3f5feeb17179ac22bcd1adf38cc7fba06230c8d5512bc6929e55a6b434dd0d2d6f2e48aa31f41106f2d409ae44641613c14378286c059b9
ssdeep: 49152:tgm5+ghg7xNxmVIBuILO/sWVm3gBl+4F2eM4A/iF6ZPeilIHHcg4oq/5AeC8CQaJ:tarUR1s/rglG0Ajc
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1A706494133E86A1AF1BF277176B6412587B9F8269B53E75E2404907F1C72B608E327B3
sha3_384: 7ae9093d523cc525dce0a7c74cbb0213cb709f8d123e90cac57d45812002d594bcef3ade868d982cb995de087af90d37
ep_bytes: ff2568123410cccccccccccccccc8b45
timestamp: 2019-03-28 08:04:45

Version Info:
CompanyName: Microsoft Corporation
FileDescription: .NET Framework
FileVersion: 4.8.3761.0 built by: NET48REL1
InternalName: system.data.dll
LegalCopyright: © Microsoft Corporation.  All rights reserved.
OriginalFilename: system.data.dll
ProductName: Microsoft® .NET Framework
ProductVersion: 4.8.3761.0
Comments: Flavor=Retail
PrivateBuild: DDBLD438
Translation: 0x0409 0x04b0

Win32:Patched-AWW [Trj] also known as:

Bkav	W32.Common.3A7FBD07
Lionic	Virus.Win32.Senoval.n!c
Skyhigh	Artemis!Trojan
McAfee	Artemis!98394D99E511
Cylance	unsafe
K7AntiVirus	Riskware ( 00584baa1 )
K7GW	Riskware ( 00584baa1 )
Kaspersky	Virus.Win32.Senoval.a
Alibaba	Virus:Win32/Senoval.a2070b1f
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Doina
Google	Detected
ZoneAlarm	Virus.Win32.Senoval.a
Microsoft	Trojan:Win32/Doina.RPX!MTB
Varist	W32/ABRisk.TMSM-8365
DeepInstinct	MALICIOUS
Panda	Trj/GdSda.A
Tencent	Trojan.Win32.Pathced_ya.16001052
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/PossibleThreat
AVG	Win32:Patched-AWW [Trj]
Avast	Win32:Patched-AWW [Trj]

How to remove Win32:Patched-AWW [Trj]?

Win32:Patched-AWW [Trj] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X