Trojan.Antavmu
Posted: March 6, 2011
Threat Metric
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
| Threat Level: | 8/10 |
|---|---|
| Infected PCs: | 508 |
| First Seen: | December 1, 2009 |
|---|---|
| Last Seen: | January 5, 2022 |
| OS(es) Affected: | Windows |
The exceptionally versatile Trojan.Antavmu is designed to hack away at your PC's safety settings and then throw down more viruses, Trojans, worms and other malware. Along with its primary functions, Trojan.Antavmu may also infect Windows processes, hijack your browser and create vulnerabilities for exploitation by remote attackers. In cases of infection, if you don't want to see your computer recruited for DDoS attacks or permanently disabled you should consider deleting Trojan.Antavmu your most urgent goal.
Trojan.Antavmu is a Trojan That's Good at Hide and Seek
Staying far from insecure .exe files and websites you don't trust is the best way to keep your computer from encountering Trojan.Antavmu, but if you think you're infected, you're in for quite a trial trying to detect Trojan.Antavmu. Trojan.Antavmu may toss barriers like these in your path to avoid easy detection:
- Some versions of Trojan.Antavmu have been reported to have rootkit techniques This allows Trojan.Antavmu to infect memory processes and makes Trojan.Antavmu nearly invisible as well as difficult to remove. If you get hit by a rootkit-based Trojan.Antavmu infection, you may have no recourse save to reformat your computer.
- Trojan.Antavmu can also bring security programs like anti-virus scanners to a dead stop. This disallows access to the very tools you'd use to find and delete Trojan.Antavmu in the first place, making your task that much harder.
- Like many other infections, Trojan.Antavmu will add entries into your registry that lets Trojan.Antavmu start with Windows. Deleting the wrong registry entries can harm your computer gravely, and removing Trojan.Antavmu without taking care of your registry may result in other serious errors.
- Trojan.Antavmu may also be compressed in some instances; this makes Trojan.Antavmu smaller and more difficult to catch even when anti-virus programs are active.
Trojan.Antavmu's Payload
If you put aside all these defensive and evasive functions, Trojan.Antavmu is still a high threat based on Trojan.Antavmu's attack capability. Different versions of Trojan.Antavmu may hijack your browser and push you towards malicious URLs, create a security backdoor for remote attackers to use against you, prevent the use of a command line prompt or disable the system restore function.
Completely deleting Trojan.Antavmu is obviously a necessity to get your computer back to a safe and secure state, but here's an even better idea: practicing smart online habits to avoid catching this deadly Trojan at all!
Aliases
More aliases (131)
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
The following files were created in the system:winlogon.exe
File name: winlogon.exeSize: 77.86 KB (77865 bytes)
MD5: 8ff76c3feb17905d50748eba7af014b3
Detection count: 96
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: January 8, 2010
csrss.exe
File name: csrss.exeSize: 74.75 KB (74752 bytes)
MD5: 38622323d37232934d7964c76187149c
Detection count: 94
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: January 8, 2010
file.exe
File name: file.exeSize: 100.35 KB (100352 bytes)
MD5: ea8633aad53c4284ef1f1c417e9896bd
Detection count: 66
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
winlogon.exe
File name: winlogon.exeSize: 82.96 KB (82964 bytes)
MD5: 5e8a41dc65dfd038fc4ad6b3918dcab5
Detection count: 45
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: January 21, 2010
csrss.exe
File name: csrss.exeSize: 72.7 KB (72704 bytes)
MD5: 40fdcdc2620287e9e516ba2aa5aab114
Detection count: 43
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
winlogon.exe
File name: winlogon.exeSize: 69.2 KB (69200 bytes)
MD5: 27eb3a53264a1f26dcef1b0a48412c47
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
winlogon.exe
File name: winlogon.exeSize: 90.7 KB (90704 bytes)
MD5: a4d4ea06251837c0c9baf3149fba909d
Detection count: 24
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: January 21, 2010
winlogon.exe
File name: winlogon.exeSize: 69.2 KB (69200 bytes)
MD5: c9f7eb2ef085a6dc3d5835d31142bc27
Detection count: 23
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: January 21, 2010
winlogon.exe
File name: winlogon.exeSize: 75.77 KB (75776 bytes)
MD5: 86700cab0e3b883730eef1b954c85068
Detection count: 22
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: January 21, 2010
winlogon.exe
File name: winlogon.exeSize: 77.35 KB (77353 bytes)
MD5: 3cfd2b7e4e530339c318a78143ed55bc
Detection count: 21
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: January 21, 2010
%WINDIR%\system32\Com\svchost.exe
File name: svchost.exeSize: 43.55 KB (43552 bytes)
MD5: 25e244b327663a2c03576a91ae803191
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32\Com
Group: Malware file
Last Updated: November 3, 2010
Leave a Reply
Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter . If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.