Malware

Win32/DesktopMania.A potentially unwanted information

Malware Removal

The Win32/DesktopMania.A potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/DesktopMania.A potentially unwanted virus can do?

  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Russian
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Win32/DesktopMania.A potentially unwanted?


File Info:

name: 2E628E31E323BD53BBB8.mlw
path: /opt/CAPEv2/storage/binaries/0423d7d50d2e9b7634745b177a239067eedc0610cc954a7651b5b456514e63b9
crc32: D51A80D0
md5: 2e628e31e323bd53bbb89f760d2a605a
sha1: 947671dac19bfb1379e9f6d84831dfdc7c311804
sha256: 0423d7d50d2e9b7634745b177a239067eedc0610cc954a7651b5b456514e63b9
sha512: 7bb7296e9df2ffafbba7cbdb4ff446d46384c7e919f8aef3259e145002a6d6bcd5a8d373d57078b68de7cef838068d14750c89982f8f79e2df096802a08917a5
ssdeep: 49152:uZJywur6AFzCtiqCrTP98hpXNHW698h/a6mPNf:/Fz7iXq/a6G
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T143066C22F6D0C872D0B21A34CC6AE7E45939BD10AE38554B32E97E5C7F366827C246D7
sha3_384: e63e9ecb51d2385d063f1262a1e8f1c6e0e042b131a000ef98674c2074c1112e222114d5d570bea36556119befe65f78
ep_bytes: 558bec83c4f0b8ccba4b00e8fc91f4ff
timestamp: 2016-07-11 14:04:21

Version Info:

0: [No Data]

Win32/DesktopMania.A potentially unwanted also known as:

LionicRiskware.Win32.Generic.1!c
SkyhighBehavesLike.Win32.ObfuscatedPoly.wh
Cylanceunsafe
ZillyaTrojan.Dico.Win32.350
K7AntiVirusAdware ( 005a7a3a1 )
K7GWAdware ( 005a7a3a1 )
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/DesktopMania.A potentially unwanted
CynetMalicious (score: 100)
Kasperskynot-a-virus:HEUR:Downloader.Win32.HidAd.gen
AvastWin32:Malware-gen
SophosGeneric Reputation PUA (PUA)
SentinelOneStatic AI – Malicious PE
JiangminDownloader.HidAd.a
GoogleDetected
ViRobotAdware.Yandex.3840432.J
ZoneAlarmnot-a-virus:HEUR:Downloader.Win32.HidAd.gen
VaristW32/Yandex.F.gen!Eldorado
McAfeePUP-XTX-AQ
VBA32BScope.Trojan.Keyloggerger
MalwarebytesPUP.Optional.Yandex.DDS
RisingTrojan.Generic@AI.90 (RDML:HwjNiO0EhAW8RF5bhfE4Sw)
YandexPUA.Downloader!2OdCs+F10dw
IkarusPUA.Yandex
MaxSecureDownloader.W32.HidAd.gen_247019
FortinetRiskware/Yandex.P
AVGWin32:Malware-gen
DeepInstinctMALICIOUS

How to remove Win32/DesktopMania.A potentially unwanted?

Win32/DesktopMania.A potentially unwanted removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment