Win32/EmailAddressPro.A potentially unsafe removal tips

The Win32/EmailAddressPro.A potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/EmailAddressPro.A potentially unsafe virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Win32/EmailAddressPro.A potentially unsafe?


File Info:
name: 57BDB82BF1FFB30868B1.mlw
path: /opt/CAPEv2/storage/binaries/ffbd017903d4506bcfaea98b46f11dec1cb151eb429e7cb5f02e98b6f9f52518
crc32: C3FF21A7
md5: 57bdb82bf1ffb30868b13274fd271259
sha1: 823fdb0aa9f5ca40785d43b93cfceee6d0ad0470
sha256: ffbd017903d4506bcfaea98b46f11dec1cb151eb429e7cb5f02e98b6f9f52518
sha512: 731f7164d7149b20868a22ee51ca160f33becbc3918a5faec566b78c774f222fd5689f60cf8940f3d28a70b034766c33eb3b3b136450e7014b235a2857510e0e
ssdeep: 6144:VOfF6Rtwvl1D8CTohZbDWvUCLdk35bNmRlRDpoBdJqc18MM9qRJKmR:GcYUCRW5xmnIAmR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13B757C46BBE180B1D67222721FF6977597B9FD401D3286076390FE2DE831A11DE3632A
sha3_384: f4e758b8244164c96f14f1706480aa6b9ef7356ef9555ec39d0e3b38f8f5a5390344731ea9276227937097ab8e562730
ep_bytes: 558bec6aff68308b4300682810410064
timestamp: 2001-09-13 17:48:25

Version Info:
CompanyName: A1 Soft
FileDescription: emailpro
FileVersion: 3, 0, 5, 0
InternalName: emailpro
LegalCopyright: Copyright © 2001
OriginalFilename: emailpro.exe
ProductName: Email Address Pro
ProductVersion: 3, 0, 5, 0
Translation: 0x0409 0x04b0

Win32/EmailAddressPro.A potentially unsafe also known as:

Bkav	W32.Common.7F75082B
Lionic	Trojan.Win32.EmailAddressPro.4!c
Skyhigh	BehavesLike.Win32.Infected.tz
McAfee	Artemis!57BDB82BF1FF
Malwarebytes	Generic.Malware/Suspicious
Zillya	Adware.OutBrowse.Win32.83833
Sangfor	Trojan.Win32.Emailaddresspro.Ve77
K7GW	Unwanted-Program ( 0054ddad1 )
K7AntiVirus	Unwanted-Program ( 0054ddad1 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/EmailAddressPro.A potentially unsafe
Cynet	Malicious (score: 100)
Avast	Win32:WrongInf-G [Susp]
Sophos	Generic Reputation PUA (PUA)
Webroot	W32.Trojan.Gen
Microsoft	Trojan:Win32/Wacatac.A!ml
Cylance	unsafe
Rising	Trojan.Generic@AI.81 (RDML:q1DeZjSSN/SkAWX/XjNKrw)
Ikarus	PUA.EmailAddressPro
Fortinet	Riskware/EmailAddressPro
AVG	Win32:WrongInf-G [Susp]
Cybereason	malicious.aa9f5c
DeepInstinct	MALICIOUS

How to remove Win32/EmailAddressPro.A potentially unsafe?

Win32/EmailAddressPro.A potentially unsafe removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X