Malware

About “Win32/UniDL.C potentially unwanted” infection

Malware Removal

The Win32/UniDL.C potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/UniDL.C potentially unwanted virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Win32/UniDL.C potentially unwanted?


File Info:

crc32: 23D195E7
md5: 389a92fda6b1a387a5266358a4b0cd00
name: 389A92FDA6B1A387A5266358A4B0CD00.mlw
sha1: cc566e1792d97bc8775415666900d3c1faa51eb3
sha256: ea9c30543a8f3495ccb1fc0606707147204ee21286955e2f13e188e23dc5ec73
sha512: 8f6cbc3bc9e88ce4913116b6249a4b603fbc185dcfcdfe0a4780acb01fcd9ae11dc5261fb2a8ce71856cd4379340ad91b0677657716e500d4acd743bed0fb0b5
ssdeep: 24576:B4nXubIQGyxbPV0db26vkk8XD95xtz+WnD1/9N0+bKiv/M6Q9Vb76Zr8YBH/o4/q:Bqe3f6QD9HtSWnDd7Z/64zH/To9XMC
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright:
FileVersion:
CompanyName: tuttop.com
Comments: This installation was built with Inno Setup.
ProductName: BeamNG.drive
ProductVersion: 0.21.3.0
FileDescription: BeamNG.drive Setup
OriginalFileName:
Translation: 0x0000 0x04b0

Win32/UniDL.C potentially unwanted also known as:

McAfeeArtemis!389A92FDA6B1
MalwarebytesPUP.Optional.BundleInstaller
AegisLabRiskware.Win32.Gamini.1!c
SangforMalware
K7GWAdware ( 0056f8051 )
K7AntiVirusAdware ( 0056f8051 )
SymantecPUA.Gen.2
Kasperskynot-a-virus:Downloader.Win32.Gamini.fwy
AlibabaDownloader:Win32/Gamini.ce9f38f5
SophosGeneric PUA MM (PUA)
McAfee-GW-EditionBehavesLike.Win32.Dropper.tc
MicrosoftProgram:Win32/Uwasson.A!ml
ZoneAlarmnot-a-virus:Downloader.Win32.Gamini.fwy
GDataWin32.Application.Agent.AOF7TL
CynetMalicious (score: 100)
VBA32TScope.Trojan.Delf
CylanceUnsafe
ESET-NOD32a variant of Win32/UniDL.C potentially unwanted
TrendMicro-HouseCallTROJ_GEN.R002H07AG21
FortinetRiskware/Gamini
PandaTrj/CI.A
Qihoo-360Win32/Virus.Downloader.bb1

How to remove Win32/UniDL.C potentially unwanted?

Win32/UniDL.C potentially unwanted removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment