The file ANTIA32.EXE is identified as a virus dropper.
The dropper ANTIA32.EXE is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
The file ANTIA32.EXE loads into the computer memory and tries to connect to the dangerous web site.
Usually the ANTIA32.EXE dropper does not infect the files on the computer and does not replicate itself on other computers.
Kill the ANTIA32.EXE process and delete the file ANTIA32.EXE.
Malware Analysis of ANTIA32.EXE
Full path on a computer: %Profile%\antia32.exe
Detected by UnHackMe:
Item Name: Antivirus Microsoft Utility
Author: Unknown
Related File: %PROFILE%\ANTIA32.EXE
Type: Registry Run
Item Name: ANTIA32.EXE
Author: Unknown
Related File: %PROFILE%\ANTIA32.EXE
Type: Multi AV Detected Files
Item Name: antia32.exe
Author: Unknown
Related File: %PROFILE%\ANTIA32.EXE
Type: Running Processes
Removal Results: Success
Number of reboot: 1
ANTIA32.EXE is known as:
Trojan.Dorifel, Trojan.PWS.Tibia.2524, W32.Trojan.CQQR-0512, a variant of Win32.Spy.Delf.PNW, BehavesLikeTrojan.ShellObject, W32.Dorifel.AHRT.tr, Win32.DH{Aw9c}, Trojan.Dorifel.al
ANTIA32.EXE hash:
- MD5: 89c0e0abf13edebaf0485a32c366fe02
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Antivirus Microsoft Utility: “%Profile%\antia32.exe”
Files:- %Profile%\antia32.exe
- %Profile%\KeyF64.txt