Downloader.Win32.Gamini.aaks removal instruction

The Downloader.Win32.Gamini.aaks is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Downloader.Win32.Gamini.aaks virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid

How to determine Downloader.Win32.Gamini.aaks?

File Info:
name: 6CFCB36948ED29A624B8.mlw
path: /opt/CAPEv2/storage/binaries/c6d0210c1aaf5c38bcba75cc3382db4de0c69e2eaebb633fc4dba2d8b5a6f1e2
crc32: 1472E911
md5: 6cfcb36948ed29a624b8df4e14ce9c1c
sha1: 4fe802ad8495eab6ab3cba1cd750f63d7c70a639
sha256: c6d0210c1aaf5c38bcba75cc3382db4de0c69e2eaebb633fc4dba2d8b5a6f1e2
sha512: 3849b5215cabae93228243675eb3cb51e1256378db8f484100dc0bc4139d44023b1d06c7c0da6062fe21591e9b73d28b6c7875dbdb024bea28b97b54aa969237
ssdeep: 24576:37FUDowAyrTVE3U5FmwOGZGPiFBtF0JbqQMUCb7muonjB6:3BuZrEU1EiF/FOqQzCb7iM
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11985CF3FB268653ED5AE0B3245739320997BB662A51A8C1F07F4484CCF365701E3BB66
sha3_384: 70c2321ee027cc922b98a917fc3a5caccddb715d6b4192bbe19cc6c15496761bd1e99f99f337b5a7d17382f9637cdee9
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2023-02-15 14:54:16

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: tuttop.com                                                  
FileDescription: Dune Spice Wars Setup                                       
FileVersion:                     
LegalCopyright:                                                                                                     
OriginalFileName:                                                   
ProductName: Dune Spice Wars                                             
ProductVersion: 2.0.0.31558                                       
Translation: 0x0000 0x04b0

Downloader.Win32.Gamini.aaks also known as:

How to remove Downloader.Win32.Gamini.aaks?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.