Should I remove “PUP.Optional.RAAmmyy”?

Malware Removal

The PUP.Optional.RAAmmyy is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

ribbon

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
THANK YOU!
DOWNLOAD NOW
On Going Offer

What PUP.Optional.RAAmmyy virus can do?

  • Queries information on disks, possibly for anti-virtualization
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Installs itself for autorun at Windows startup
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
rl.ammyy.com
a.tomx.xyz

How to determine PUP.Optional.RAAmmyy?


File Info:

crc32: E1F83A5F
md5: eb8c6abfc9b3def84f666ae731a8e908
name: ammy35.exe
sha1: b3c71b8070f9c2300f2c462ec14b49c413c57a65
sha256: 61f8a98198d6777c4e7fa54d0a6b898944e0500e0ce4c7cf5732d16707f70d3a
sha512: 613da33a36a2d0f77eed0d6e006ceb9ab8e90724d742fb4e0fb51051cefcb39c36c19d546fc340b1d51a03d2d528d8dab9fc3349baf3d71d17d165fa25adb723
ssdeep: 12288:pii1SQxjP6j34G+t2aPHXuTy4RtfUwFDZAQmsNs8wigvP/:h1S6z6j34G+t2afXh4RtxFD/mAsVfv
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright:
InternalName: Ammyy Admin
FileVersion: 3.5
CompanyName: Ammyy LLC
PrivateBuild:
LegalTrademarks:
Comments:
ProductName: Ammyy Admin
SpecialBuild:
ProductVersion: 3.5
FileDescription: Ammyy Admin
OriginalFilename:
Translation: 0x0409 0x04b0

PUP.Optional.RAAmmyy also known as:

MicroWorld-eScanGen:Variant.Application.RemoteAdmin.6
FireEyeGeneric.mg.eb8c6abfc9b3def8
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
BitDefenderGen:Variant.Application.RemoteAdmin.6
K7GWUnwanted-Program ( 004b889d1 )
K7AntiVirusUnwanted-Program ( 004b889d1 )
ArcabitTrojan.Application.RemoteAdmin.6
TrendMicroTROJ_GEN.R014C0ODI19
NANO-AntivirusRiskware.Win32.RemoteAdmin.deqhmm
F-ProtW32/RemoteAdmin.C.gen!Eldorado
SymantecSMG.Heur!gen
APEXMalicious
Paloaltogeneric.ml
Kasperskynot-a-virus:HEUR:RemoteAdmin.Win32.Generic
AlibabaRemoteAdmin:Win32/Ammyy.2c894e4e
RisingMalware.Heuristic.MLite(93%) (AI-LITE:d8c+MsDkXAoBl/yzKHxZvA)
Ad-AwareGen:Variant.Application.RemoteAdmin.6
EmsisoftGen:Variant.Application.RemoteAdmin.6 (B)
ComodoApplication.Win32.RemoteAdmin.Ammyy.CA@6lncg7
DrWebProgram.RemoteAdmin.701
ZillyaAdware.BrowseFox.Win32.423705
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.RemAdmAmmyy.bh
FortinetRiskware/Ammyy
Trapminemalicious.high.ml.score
CyrenW32/RemoteAdmin.C.gen!Eldorado
JiangminRemoteAdmin.Generic.a
WebrootW32.Trojan.Ra
MAXmalware (ai score=99)
Antiy-AVLRiskWare[RemoteAdmin]/Win32.Ammyy
Endgamemalicious (high confidence)
MicrosoftProgram:Win32/Bitrepeyu.C
ZoneAlarmnot-a-virus:HEUR:RemoteAdmin.Win32.Generic
AhnLab-V3Unwanted/Win32.RemoteAdmin.R218311
Acronissuspicious
McAfeeRemAdm-Ammyy
MalwarebytesPUP.Optional.RAAmmyy
PandaTrj/Chgt.F
ESET-NOD32a variant of Win32/RemoteAdmin.Ammyy.B potentially unsafe
TrendMicro-HouseCallTROJ_GEN.R014C0ODI19
YandexRiskware.RemoteAdmin!
SentinelOneDFI – Malicious PE
eGambitRAT.Ammyy
GDataWin32.Riskware.RemoteAdmin.A
AVGFileRepMetagen [Malware]
Cybereasonmalicious.fc9b3d
AvastWin32:RemoteAdmin-K [Tool]
CrowdStrikewin/malicious_confidence_90% (D)
Qihoo-360Win32/Application.RemoteAdmin.1b9

How to remove PUP.Optional.RAAmmyy?

PUP.Optional.RAAmmyy removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment