Win32/MailRu.B potentially unwanted (file analysis)

The Win32/MailRu.B potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/MailRu.B potentially unwanted virus can do?

Presents an Authenticode digital signature
A process attempted to delay the analysis task.
Performs some HTTP requests
Unconventionial language used in binary resources: Russian
Creates a hidden or system file
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

mrds.mail.ru

amigodl.mail.ru

How to determine Win32/MailRu.B potentially unwanted?


File Info:
crc32: D54ECAF0
md5: 631ba66254ee7f01bc255c39eb33a549
name: 631BA66254EE7F01BC255C39EB33A549.mlw
sha1: 3a336be3630b4286fd884f91d3cdcc4b24351f9b
sha256: 6491244a71a5e156f3aad2752618d919c0585b98fc2d4858cb482adb0d37fd41
sha512: 19f32124c0a30a66c3d362a55d7e78946ed455bfbe8b5c28ea7ff85befe66b5a467014be3808a6e8e290399d2497b87bd9e3326b93400568bde935d45c708eff
ssdeep: 6144:lrZxAPgGCtlTE6p6aFXFUedSqR3Lc3AOTgQDBxHfoE13+:lQetlTE6p6QXOeJE2QLQ63+
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright 2015
InternalName: Amigo Mail.Ru
FileVersion: 2.0.0.169
CompanyName: Mail.Ru
ProductName: Amigo@Mail.Ru
ProductVersion: 2.0.0.169
FileDescription: Amigo@Mail.Ru
OriginalFilename: Amigo@Mail.Ru
Translation: 0x0409 0x04b0

Win32/MailRu.B potentially unwanted also known as:

McAfee	GenericRXAA-FA!631BA66254EE
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Adware ( 004f7d741 )
K7GW	Adware ( 004f7d741 )
CrowdStrike	win/malicious_confidence_70% (D)
Cyren	W32/S-506e523c!Eldorado
Symantec	SMG.Heur!gen
Avast	FileRepMetagen [PUP]
Comodo	Application.Win32.MailRu.BACS@6kp8ua
TrendMicro	TROJ_GEN.R002C0OJQ20
McAfee-GW-Edition	Artemis
Sophos	Mal/Generic-S
Antiy-AVL	Trojan/Win32.TSGeneric
SUPERAntiSpyware	PUP.MailRU/Variant
Malwarebytes	Generic.Malware/Suspicious
ESET-NOD32	a variant of Win32/MailRu.B potentially unwanted
TrendMicro-HouseCall	TROJ_GEN.R002C0OJQ20
Fortinet	W32/Generic.AC.3BBEB9!tr
AVG	FileRepMetagen [PUP]

How to remove Win32/MailRu.B potentially unwanted?

Win32/MailRu.B potentially unwanted removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/MailRu.B potentially unwanted (file analysis)