How to remove "Win32/TrojanDownloader.Rugmi.AAE"?

The Win32/TrojanDownloader.Rugmi.AAE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanDownloader.Rugmi.AAE virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Presents an Authenticode digital signature
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Drops a binary and executes it
Creates a hidden or system file
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

i.imgur.com

How to determine Win32/TrojanDownloader.Rugmi.AAE?


File Info:
crc32: D5A88576
md5: bb0d18064cff3e8e3aaccb648089f87d
name: upload_file
sha1: 68d97daa03745c5addc52a791969183402908ae6
sha256: 3746f6d2d5f3e12e69c80085eef48b25f06974965b930563d773eac6e5c2f291
sha512: bd55fb0ab8ccfe3790f8300a024728d65413c01812ecfb7e7eb9ab37402a5c6c26cb6e3d24e5920a7283939e132bfd395a2209fa44d4e4cc19fce04b88c035eb
ssdeep: 393216:3RLMVsfdbhlU6T9QHpqJiSJBUu6bKnD5vSFNVL:usfdh9gpoJHnD5vSFNVL
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: JSC T-REX
FileVersion: 0.15.4.0
CompanyName: http://trex-miner.com
ProductName: T-Rex NVIDIA GPU miner
ProductVersion: 0.15.4.0
FileDescription: NVIDIA GPU miner
Translation: 0x0000 0x04e4

Win32/TrojanDownloader.Rugmi.AAE also known as:

DrWeb	BackDoor.Rat.281
MicroWorld-eScan	Trojan.GenericKD.44115559
FireEye	Trojan.GenericKD.44115559
CAT-QuickHeal	Trojan.CoinMiner
McAfee	Artemis!BB0D18064CFF
Cylance	Unsafe
K7AntiVirus	Trojan ( 0057160d1 )
BitDefender	Trojan.GenericKD.44115559
K7GW	Trojan ( 0057160d1 )
Cyren	W64/Trojan.FMXW-3666
Symantec	ML.Attribute.HighConfidence
Kaspersky	HEUR:Exploit.Win32.Shellcode.gen
Alibaba	TrojanDownloader:Win64/Miner.6e414feb
ViRobot	Trojan.Win32.Z.Wacatac.13355448
Rising	Trojan.Miner!8.EA1 (TFE:1:3tNQYXfU79F)
Ad-Aware	Trojan.GenericKD.44115559
Comodo	Malware@#2oek3jfrofy53
F-Secure	Trojan.TR/Kryptik.tbnsw
Invincea	Generic PUA GI (PUA)
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	MalCert.A (A)
Ikarus	Trojan.NsisInject
Webroot	W32.Miner
Avira	TR/Miner.sjwem
MAX	malware (ai score=82)
Microsoft	Trojan:Win32/Ymacco.AA37
Arcabit	Trojan.Generic.D2A12667
ZoneAlarm	HEUR:Exploit.Win32.Shellcode.gen
GData	Trojan.GenericKD.44115559
VBA32	Trojan.Win64.Miner
Malwarebytes	RiskWare.BitCoinMiner
ESET-NOD32	Win32/TrojanDownloader.Rugmi.AAE
TrendMicro-HouseCall	TROJ_GEN.R002H0CJJ20
eGambit	Unsafe.AI_Score_72%
Fortinet	W32/Rugmi.FAH!tr.dldr
AVG	Win32:Malware-gen
Panda	Trj/CI.A
Qihoo-360	Win32/Trojan.Exploit.7ee

How to remove Win32/TrojanDownloader.Rugmi.AAE?

Win32/TrojanDownloader.Rugmi.AAE removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

How to remove “Win32/TrojanDownloader.Rugmi.AAE”?