Should I remove “Win32/MyPlayCity.G potentially unwanted”?

The Win32/MyPlayCity.G potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/MyPlayCity.G potentially unwanted virus can do?

• Sample contains Overlay data
• Presents an Authenticode digital signature
• Performs HTTP requests potentially not found in PCAP.
• Attempts to modify Internet Explorer’s start page
• Unconventionial binary language: Russian
• Unconventionial language used in binary resources: Russian
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Attempts to modify proxy settings
• Anomalous binary characteristics

How to determine Win32/MyPlayCity.G potentially unwanted?

File Info:
name: 6D24B7D49F6F35217D23.mlw
path: /opt/CAPEv2/storage/binaries/3108df5f5f34a21a2ac7912ae124b6db1a8040ce83940f24af3198b670e58c53
crc32: 4F1BC27B
md5: 6d24b7d49f6f35217d234d9dac53273e
sha1: 9e235d64037be220348cc406faf19a749013c08f
sha256: 3108df5f5f34a21a2ac7912ae124b6db1a8040ce83940f24af3198b670e58c53
sha512: 5b2b1968b0d8ff683c093311169ca273ada28000ccda10b85caac2a9c4761a3dd09b01e8cce7b34b553b7059e6fd1a8662001041969502acd45486ff6e8db8dd
ssdeep: 49152:K1CuISjvgZzSxksy2BX6VBxjTyTTfRQdNky:K1atSHy2BX6V0adNH
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T195B58D22B385043BC0721B3F58AB9664DD3FBE202A6AD8475FF47D4C0E396816D39697
sha3_384: e05dbb2a6cd67e75a359c7f0510daddac04983caa2c33577be97114a249007d44d9c106f9d5fd173f25f0cd27ef2615e
ep_bytes: 558bec83c4f0b8e8e25a00e81847e5ff
timestamp: 2013-02-26 13:19:55

Version Info:
CompanyName: 
FileDescription: 
FileVersion: 9.3.0.0
InternalName: 
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: 
ProductName: 
ProductVersion: 1.0.0.0
Comments: 
Translation: 0x0419 0x04e3

Win32/MyPlayCity.G potentially unwanted also known as:

How to remove Win32/MyPlayCity.G potentially unwanted?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.