Should I remove “Androm.10”?

The Androm.10 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Androm.10 virus can do?

• Executable code extraction
• Injection (inter-process)
• Injection (Process Hollowing)
• Attempts to connect to a dead IP:Port (1 unique times)
• Creates RWX memory
• A process attempted to delay the analysis task.
• HTTP traffic contains suspicious features which may be indicative of malware related traffic
• Performs some HTTP requests
• Unconventionial language used in binary resources: Arabic (Algeria)
• Executed a process and injected code into it, probably while unpacking
• Exhibits behavior characteristic of Andromeda/Gamarue malware
• Attempts to stop active services
• Tries to unhook or modify Windows functions monitored by Cuckoo
• Mimics the file times of a Windows system file
• Installs itself for autorun at Windows startup
• Creates a hidden or system file
• Creates a copy of itself
• Attempts to disable UAC
• Attempts to interact with an Alternate Data Stream (ADS)
• Attempts to modify Explorer settings to prevent hidden files from being displayed
• Attempts to modify user notification settings

Related domains:

How to determine Androm.10?

File Info:
crc32: 7F3864B7
md5: 3bc913a8757cb23ed8e8d3d7a984a251
name: 3BC913A8757CB23ED8E8D3D7A984A251.mlw
sha1: 763b1902efab20bf1e046ec7c3c4c6a24504abc9
sha256: 61be5a412962900d5145be940771ccecd30c89d1d7ae1dd003de6dead29f9fa6
sha512: e6cb992ea60a844491f5abd8fc5a0e0656a4ebc73c5e2066d32a6efc0ddecd7bf5d8781b335b4148e838ec4e4c5e3a3addacba0f8b3d79cbd82722385a5e85db
ssdeep: 3072:8VxIULr5q+LRaQKsuicAbFwhAg0FuuJy/lyN+GmgLQ/c+KyXIwWuVUxqq1N/jeqF:8VxIUv4mjFwhAOCoy3mCzjeqRzeK
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2005-2006 Foxit Software Company 
InternalName: FoxitReader.exe
FileVersion: 2, 0, 2006, 0609
CompanyName: 
PrivateBuild: 
LegalTrademarks: 
Comments: 
ProductName: Foxit Reader
SpecialBuild: 
ProductVersion: 2, 0, 2006, 0609
FileDescription: Foxit Reader, Best Reader for Everyday Use!
OriginalFilename: FoxitReader.EXE
Translation: 0x0409 0x04b0

Androm.10 also known as:

How to remove Androm.10?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.