How to remove “Mal/Armada-A”?

The Mal/Armada-A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/Armada-A virus can do?

Creates RWX memory
Reads data out of its own binary image
Unconventionial language used in binary resources: Korean
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Mal/Armada-A?


File Info:
crc32: 3BFA2282
md5: e284b66376391635fbe1fe3aef5afa29
name: _____________________.exe
sha1: 3fa1bc475b599f9ea4acb849eea446b90a1c3214
sha256: e9e336a0db8ccc266702bc5ba81b7544c3c165e10e71b681756e3ba4a50c4093
sha512: 6c6a7bc78fa0ac7a5d6aa2b321d489ee9f2d17d495684b84367e3eb23f0b125eb2d0a0491c1e6a9e53486cf9b44badd1cc62919c1cfc7ba7eb960f5d5dfeff1d
ssdeep: 12288:FL9hnxfOg2pTNJ1QCJix6cgTCTFTfHMTaovR7iypiq3qjOT+uTXt:FL9hnxKfX8FjsmNypiiLrXt
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Mal/Armada-A also known as:

DrWeb	Trojan.Click2.6275
McAfee	Artemis!E284B6637639
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Cybereason	malicious.75b599
BitDefenderTheta	Gen:NN.ZelphiF.34090.NKYoaaLmaGdO
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
ClamAV	Win.Trojan.Agent-436329
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Trojan.Win32.Agent.clvcfm
Tencent	Malware.Win32.Gencirc.10b54930
Sophos	Mal/Armada-A
Comodo	Malware@#1fuwvj7ngz8ux
F-Secure	Heuristic.HEUR/AGEN.1029670
Zillya	Trojan.Agent.Win32.131555
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Ramnit.jc
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.e284b66376391635
Jiangmin	Trojan/Agent.eihe
Avira	HEUR/AGEN.1029670
Antiy-AVL	Trojan/Win32.Agent
Endgame	malicious (high confidence)
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/Wacatac.C!ml
VBA32	Trojan.Agent
Panda	Trj/CI.A
Rising	Trojan.Generic!8.C3 (CLOUD)
Yandex	Trojan.Agent!MA155Q8/CTc
SentinelOne	DFI – Suspicious PE
Fortinet	W32/Agent.A!tr
AVG	FileRepMetagen [Malware]
CrowdStrike	win/malicious_confidence_90% (W)
MaxSecure	Trojan.Malware.300983.susgen

How to remove Mal/Armada-A?

Mal/Armada-A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X