Detected by Microsoft Defender Antivirus
Aliases: Trojan.MulDrop.35783 (Dr.Web) W32/Obfuscated.A3!genr (Norman)
Trojan:Win32/Antavmu.AA is a trojan that stops Windows and other services, terminates security processes, and changes several Windows settings including disabling System Restore and preventing use of a command line prompt. The trojan may allow remote access and control by an attacker.
Manual removal is not recommended for this threat. To detect and remove this threat and other malicious software that may have been installed, run a full-system scan with an up-to-date antivirus product such as Microsoft Security Essentials, or the Microsoft Safety Scanner. For more information about using antivirus software, see http://www.microsoft.com/security/antivirus/av.aspx.