Win32/MorganCatering.A potentially unwanted removal

The Win32/MorganCatering.A potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/MorganCatering.A potentially unwanted virus can do?

• Behavioural detection: Executable code extraction – unpacking
• A file was accessed within the Public folder.
• Sample contains Overlay data
• Presents an Authenticode digital signature
• Reads data out of its own binary image
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• CAPE detected the shellcode patterns malware family
• Deletes executed files from disk
• Touches a file containing cookies, possibly for information gathering
• Yara detections observed in process dumps, payloads or dropped files

How to determine Win32/MorganCatering.A potentially unwanted?

File Info:
name: 110CD4D2DF9F917E8880.mlw
path: /opt/CAPEv2/storage/binaries/ba2ff1305491446482415a0f5e98ed1c27a3c945b9ce3769ebbfa2895d4f4f9e
crc32: 5CAD5DCD
md5: 110cd4d2df9f917e88801d3c85c57b2c
sha1: 81086edfa9003b534a32ff4c54172e22fe763d98
sha256: ba2ff1305491446482415a0f5e98ed1c27a3c945b9ce3769ebbfa2895d4f4f9e
sha512: cf61bf5698ed84caebdff829868b9895fa953b23efbae292fa17f61351b828a9065925ef0a0d12142fd326e526b43f6051e1f3ba6f5f4491ff526c0238455fc0
ssdeep: 196608:TrGfm4UF6zGgz3JjmZMkYwIRmq4WUAhKRb/2o3bH:Tr4Igz3RitDIRmFAhKR7j3D
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CF96223B6364A53FD19E1B3285B3E360897B73D07C1E8D1A57F0084CDF2A6A12E3A955
sha3_384: e81d36b409ff7ca6757fe8ac09ced793fb03417b44e53f9360b9c101d765a62041972043d620d8503bdbe75624e0e030
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2020-11-15 09:48:30

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName:                                                             
FileDescription: Metro Exodus Setup                                          
FileVersion:                     
LegalCopyright:                                                                                                     
OriginalFileName:                                                   
ProductName: Metro Exodus                                                
ProductVersion: 0.0.0.1                                           
Translation: 0x0000 0x04b0

Win32/MorganCatering.A potentially unwanted also known as:

How to remove Win32/MorganCatering.A potentially unwanted?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.