About “Trojan.Uwamson” infection

The Trojan.Uwamson is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Uwamson virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.Uwamson?


File Info:
crc32: 9E0457CB
md5: 447d48e8fc5e2e96f0de23b050fd13db
name: 447D48E8FC5E2E96F0DE23B050FD13DB.mlw
sha1: d50ad38a74dfac2fae5e98cc4c5025ebe5a01085
sha256: 3e18a1f92ff8e60e0a97e4fc4c7ec0ef7fb919d8be8766f982a32df500733f93
sha512: 6ac2f7168eee92a1901acc76648c7d98732d6dff0ded28c9650cce9fb8ce23cbfd0feaebca8f85253fad8f970c60952ad7d4262cbb4e4c1fee888013b1f561aa
ssdeep: 24576:PEKKYJkwrsrIZmDj7nnaewsAjeBsbSAOidYrovp4Tp9aQCoGsXHRL:PYcMjGljeBMO+YrovpU/9L
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 1992-2001 Microsoft Corporation
InternalName: dbimport
FileVersion: 8.00.00.4487
CompanyName: Microsoft Corporation
ProductName: Microsoft(R) Windows Media Player
ProductVersion: 8.00.00.4487
FileDescription: Microsoft Windows Media Player Setup Utility
OriginalFilename: dbimport
Translation: 0x0409 0x04b0

Trojan.Uwamson also known as:

K7AntiVirus	Riskware ( 0040eff71 )
ClamAV	Win.Ransomware.WannaCry-9856297-0
CAT-QuickHeal	Trojan.Uwamson
McAfee	Artemis!447D48E8FC5E
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (W)
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.a74dfa
Cyren	W32/Emotet.BBS.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Cynet	Malicious (score: 100)
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.Ransomware.th
FireEye	Generic.mg.447d48e8fc5e2e96
Microsoft	Program:Win32/Uwamson.A!ml
AegisLab	Trojan.Win32.Malicious.4!c
Malwarebytes	Generic.Trojan.Malicious.DDS
Ikarus	Virus.Win32.Ipamor
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Ipamor.658B!tr
Paloalto	generic.ml

How to remove Trojan.Uwamson?

Trojan.Uwamson removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X