Categories: Malware

Should I remove “MSIL/Amonetize.AF potentially unwanted”?

The MSIL/Amonetize.AF potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Amonetize.AF potentially unwanted virus can do?

Executable code extraction
Creates RWX memory
At least one IP Address, Domain, or File Name was found in a crypto call
The binary likely contains encrypted or compressed data.

How to determine MSIL/Amonetize.AF potentially unwanted?


File Info:
crc32: CA9F9FFDmd5: 2ef28df3551f535b6b82684399023602name: 2EF28DF3551F535B6B82684399023602.mlwsha1: 0b978c5f6e871b9310439c43a876febf0df80edcsha256: 8166af920675e38a929d672b8a00dccef0121d38bcdef0bd225f4d84af6b5eb2sha512: 44ec8d9bed6bdca8345b1aefcad5c66a44438dea2a1e74b779c9e647f4e622e3bd28af0e64d9fb574880d915d419c4defc8efc76e1f409dcef41727849d0dea7ssdeep: 3072:sncKzLDsKM3SxfRheW0SUE1h9nmyMg5U4zhprDTfpYzb1D:8cKLs3afzUE1vmU5rNgb1type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
Translation: 0x0000 0x04b0LegalCopyright: Copyright xa9  2016Assembly Version: 1.0.0.695InternalName: installer.exeFileVersion: 1.0.0.695ProductVersion: 1.0.0.695FileDescription:  OriginalFilename: installer.exe

MSIL/Amonetize.AF potentially unwanted also known as:

K7AntiVirus	Adware ( 004dc60a1 )
Lionic	Adware.Win32.Generic.2!c
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader21.33345
Cynet	Malicious (score: 99)
ALYac	Application.Downloader.AGO
Cylance	Unsafe
Zillya	Tool.Downloader.Win32.3289
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	AdWare:MSIL/Amonetize.d51d1688
K7GW	Adware ( 004dc60a1 )
Cybereason	malicious.3551f5
Cyren	W32/S-524e6fcc!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Amonetize.AF potentially unwanted
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
ClamAV	Win.Packed.Susppack-9881847-0
Kaspersky	not-a-virus:HEUR:AdWare.MSIL.Agent.gen
BitDefender	Application.Downloader.AGO
NANO-Antivirus	Riskware.Win32.Dwn.eeznyh
MicroWorld-eScan	Application.Downloader.AGO
Tencent	Win32.Adware.Generic.Hwww
Ad-Aware	Application.Downloader.AGO
Sophos	Generic PUA AL (PUA)
Comodo	Application.MSIL.Amonetize.AF@67z1tc
BitDefenderTheta	Gen:NN.ZemsilF.34236.km0@a4OLQPk
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.cc
FireEye	Generic.mg.2ef28df3551f535b
Emsisoft	Application.Downloader.AGO (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	AdWare.Generic.cmik
Webroot	W32.Adware.Gen
Avira	ADWARE/Amonetize.Gen7
eGambit	Unsafe.AI_Score_100%
Antiy-AVL	Trojan/Generic.ASMalwS.1A06EC9
Microsoft	Trojan:Win32/Wacatac.A!ml
SUPERAntiSpyware	PUP.Amonetize/Variant
GData	Application.Downloader.AGO
AhnLab-V3	PUP/Win32.Amonetize.C1350116
McAfee	Artemis!2EF28DF3551F
MAX	malware (ai score=74)
Malwarebytes	PUP.Optional.Amonetize
Panda	Trj/GdSda.A
Yandex	PUA.Agent!3IZe2aRqpL8
Ikarus	not-a-virus:AdWare.Amonetize
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Adware/Generic
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml