How to remove “Win32:Amonetize-AX [PUP]”?

The Win32:Amonetize-AX [PUP] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:Amonetize-AX [PUP] virus can do?

Authenticode signature is invalid

How to determine Win32:Amonetize-AX [PUP]?


File Info:
name: EA084B7B4954E616F0B3.mlw
path: /opt/CAPEv2/storage/binaries/9476f8e169586c958e695356f6e6f9fabadc15075ec7600184d880c9d990b629
crc32: E2840DD2
md5: ea084b7b4954e616f0b3e5ac303829ae
sha1: 6a7ac910ead092a0297bedca3affb6b75c717d31
sha256: 9476f8e169586c958e695356f6e6f9fabadc15075ec7600184d880c9d990b629
sha512: 328547576174e073306be36176b3ff3e20e57e2debd4db3d11f8ad2d12ea6ecfffaa01d6e2cf8d9be117c5e8bfc535eb586cc28030db67b780c36f97f2e1744a
ssdeep: 3072:MakbMsTHUzBM5S9D6c+pCE49X4Z8U1bhhnkVM6jVqvgZS2uH9ybAiKX6/BOinRHA:MakbEC1J6jVq4ZS2uA+X6pO+UB+FjBg9
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14F046C206A464236EAD115B1DE7D7BAF691ED7320B5A11C3D3DD2C206EA0BD3B63520F
sha3_384: 060fe5838dd021190d9222d99f32894e3f3c00855094e009d4ba4b6027a6013baaa0970146aa7061ca10574ba48676e4
ep_bytes: e8ab9f0000e989feffffcccccccccc53
timestamp: 2014-05-03 05:02:06

Version Info:
0: [No Data]

Win32:Amonetize-AX [PUP] also known as:

Bkav	W32.AIDetect.malware2
Cybereason	malicious.0ead09
Cyren	W32/S-b19a792f!Eldorado
Sophos	Generic ML PUA (PUA)
APEX	Malicious
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
Ikarus	Trojan.SuspectCRC
SentinelOne	Static AI – Suspicious PE
AVG	Win32:Amonetize-AX [PUP]
Avast	Win32:Amonetize-AX [PUP]

How to remove Win32:Amonetize-AX [PUP]?

Win32:Amonetize-AX [PUP] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X