Should I remove “Trojan:Win32/Gamarue!atmnm”?

The Trojan:Win32/Gamarue!atmnm is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Gamarue!atmnm virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan:Win32/Gamarue!atmnm?


File Info:
name: AEE589E333C719A52D47.mlw
path: /opt/CAPEv2/storage/binaries/067819e13b430681fd85297380f299cbadafc4c769c4a8ac9d420c3c46597e40
crc32: B6852175
md5: aee589e333c719a52d4733409c737d0e
sha1: 72dabd862453a4db65d59c109f4e59e8d10660c5
sha256: 067819e13b430681fd85297380f299cbadafc4c769c4a8ac9d420c3c46597e40
sha512: 070138c39c2b48a14a2389c941a60e7cee0673233f301a0decd213e36e6d8b39aae0da3256276ff8545453aaf705752f5662605fb846457cca65525966737655
ssdeep: 1536:t4BB+DF5YTOrzxTe2EchmW3vJ9cEiAM+RAy/:tkB+UTaTN3mWhZiAM+RAc
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12A934A107A51C473E0A2293445BAC7F24BBE793217B884C77B9816BE5FB13C2573639A
sha3_384: a788dca135fc7f007e21dc1debaafd58d88732291ab0e23e184e07b007e204afc9898099c0f28715973bc0dfc8f39037
ep_bytes: e899440000e989feffff8bff558bec81
timestamp: 2015-11-09 04:47:42

Version Info:
0: [No Data]

Trojan:Win32/Gamarue!atmnm also known as:

Lionic	Trojan.Win32.ChompStays.4!c
MicroWorld-eScan	Generic.Dacic.06B5CF0E.A.DA786C89
ClamAV	Win.Malware.Generickdz-9775453-0
FireEye	Generic.mg.aee589e333c719a5
CAT-QuickHeal	Trojan.GenericPMF.S30085441
McAfee	GenericRXCC-BN!AEE589E333C7
Malwarebytes	Malware.AI.1044283777
VIPRE	Gen:Variant.Midie.99116
Sangfor	Virus.Win32.Save.a
K7AntiVirus	Trojan ( 005a56bc1 )
K7GW	Trojan ( 005a56bc1 )
Cybereason	malicious.333c71
Cyren	W32/Agent.FRZ.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Andariel.I
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.ChompStays.gen
BitDefender	Generic.Dacic.06B5CF0E.A.DA786C89
NANO-Antivirus	Trojan.Win32.ChompStays.jvjoih
Avast	Win32:TrojanX-gen [Trj]
Tencent	Malware.Win32.Gencirc.10be6eb6
Sophos	Mal/Agent-ARR
F-Secure	Heuristic.HEUR/AGEN.1362155
DrWeb	Trojan.DownLoader45.48603
Zillya	Trojan.Andariel.Win32.190
McAfee-GW-Edition	BehavesLike.Win32.Generic.nt
Emsisoft	Generic.Dacic.06B5CF0E.A.DA786C89 (B)
Ikarus	Trojan.Win32.Agent
GData	Win32.Trojan.PSE.1R5N4UM
Jiangmin	Trojan.ChompStays.ab
Avira	HEUR/AGEN.1362155
MAX	malware (ai score=85)
Antiy-AVL	Trojan/Win32.ChompStays
Xcitium	TrojWare.Win32.Agent.SBXK@7g63mg
Arcabit	Generic.Dacic.06B5CF0E.A.DA786C89
ZoneAlarm	HEUR:Trojan.Win32.ChompStays.gen
Microsoft	Trojan:Win32/Gamarue!atmnm
Google	Detected
AhnLab-V3	Win-Trojan/Rifdoor.Gen
BitDefenderTheta	Gen:NN.ZexaF.36250.fuX@amArsqd
ALYac	Gen:Variant.Midie.99116
Cylance	unsafe
Panda	Trj/GdSda.A
Rising	Trojan.Agent!8.B1E (TFE:5:9p6zG1u7F3N)
Yandex	Trojan.GenAsa!FG4K9HJM8Ec
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.UDW!tr
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Trojan:Win32/Gamarue!atmnm?

Trojan:Win32/Gamarue!atmnm removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X