Trojan

Trojan:Win32/Mamson.A!ml removal instruction

Malware Removal

The Trojan:Win32/Mamson.A!ml is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Mamson.A!ml virus can do?

  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Checks for the presence of known windows from debuggers and forensic tools
  • Network activity detected but not expressed in API logs
  • Checks for the presence of known devices from debuggers and forensic tools

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan:Win32/Mamson.A!ml?


File Info:

crc32: B7802B01
md5: 60786e445c05089c00bf0571b586ca62
name: Driv3r_3_trainer.exe
sha1: e1b41c13116fef2244ef4221c0c5d72d473a65aa
sha256: c8e4d7ce377cf7ac135d993ee4b0620bb47eb348d174aebd902a5b409ab9ac60
sha512: 36da6e98ac5accf89cc7991431d7722243b6338322e53f85570b4a3102175dd624798063a8803b691c0b582c8b74cb0a4d7a8dd6421a16059ca91d2cc773450a
ssdeep: 768:jseSv4EvbJjLXm4stRd4cSD0myjwDpUZ408uMW9q+W:jqvt/W4sp4cwyjwDd08xK
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Trojan:Win32/Mamson.A!ml also known as:

MicroWorld-eScanTrojan.GenericKD.41098438
FireEyeTrojan.GenericKD.41098438
McAfeeArtemis!60786E445C05
CylanceUnsafe
K7AntiVirusUnwanted-Program ( 004c1f211 )
BitDefenderTrojan.GenericKD.41098438
K7GWUnwanted-Program ( 004c1f211 )
Cybereasonmalicious.45c050
Invinceaheuristic
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
GDataTrojan.GenericKD.41098438
AlibabaGameHack:Win32/Generic.7614131f
AegisLabTrojan.Win32.Generic.4!c
RisingTrojan.Generic@ML.84 (RDML:kwMnkUyUlVw5CBoXtU3Qhw)
Ad-AwareTrojan.GenericKD.41098438
SophosGeneric PUA OB (PUA)
ComodoMalware@#2isakbh39gt6t
DrWebTrojan.Siggen8.18483
TrendMicroTROJ_GEN.R002C0PE919
McAfee-GW-EditionGenericRXHH-CC!BDEF3561CF98
EmsisoftTrojan.GenericKD.41098438 (B)
IkarusWorm.Win32.VBNA
CyrenW32/Trojan.DTOS-5502
Antiy-AVLRiskWare/Win32.Gamehack
Endgamemalicious (moderate confidence)
ArcabitTrojan.Generic.D2731CC6
MicrosoftTrojan:Win32/Mamson.A!ml
AhnLab-V3Malware/Win32.Generic.C3109345
ALYacTrojan.GenericKD.41098438
VBA32TScope.Malware-Cryptor.SB
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/GameHack.RG potentially unsafe
TrendMicro-HouseCallTROJ_GEN.R002C0PE919
SentinelOneDFI – Suspicious PE
FortinetRiskware/GameHack
CrowdStrikewin/malicious_confidence_60% (W)

How to remove Trojan:Win32/Mamson.A!ml?

Trojan:Win32/Mamson.A!ml removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment