Risk

WinGo/Riskware.TacticalRMM.A removal instruction

Malware Removal

The WinGo/Riskware.TacticalRMM.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What WinGo/Riskware.TacticalRMM.A virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine WinGo/Riskware.TacticalRMM.A?



File Info:

name: 72FAB0FAA9B01CEE1C65.mlw
path: /opt/CAPEv2/storage/binaries/349f1f5c58672d53c3dd623336ae058930cc4f44827e9717292554bb2ded8625
crc32: 27EB003C
md5: 72fab0faa9b01cee1c656745e094eb78
sha1: f74c23a20bf8873343afd19bfc7b6ae325e3f4d0
sha256: 349f1f5c58672d53c3dd623336ae058930cc4f44827e9717292554bb2ded8625
sha512: 86c355efefa03a9983fb4a67db4d5a2871ae42d8c27d9714ac191e4bd684b748189f40cd739a10721d7721d8c3b042dfbe6d92f5c4cc501d238c10604b26650f
ssdeep: 49152:SxdKqUsAUyhqYzqQOH3yz5vdGUyqLhXwOkhzvzzNbB2LWU7euW12ioqChG0VF1Zh:SbKqVVy9OQOH3y2hzvzgRiBQh
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1A0262941FEDB84B5E603153114A7A2BF17307E098B25CB97DA507F6BE8776E20E32219
sha3_384: 0b9225346d922940c922d4ceb271f50331d9e44261bb2b4d260e2a60d61432db61a98116805202c2d3e8dd4db60a2cef
ep_bytes: e9dbdcffffcccccccccccccccccccccc
timestamp: 1970-01-01 00:00:00


Version Info:

CompanyName: AmidaWare LLC
FileDescription: Tactical RMM Installer
FileVersion: v2.0.4.0
InternalName: rmm.exe
LegalCopyright: Copyright (c) 2022 AmidaWare LLC
OriginalFilename: installer.go
ProductName: Tactical RMM Installer
ProductVersion: v2.0.4.0
Translation: 0x0409 0x04b0

WinGo/Riskware.TacticalRMM.A also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.ClipBanker.tscz
CAT-QuickHealTrojan.Tacticalrmm
SkyhighArtemis
McAfeeGenericRXAA-FA!72FAB0FAA9B0
Cylanceunsafe
SangforRiskware.Win32.Tacticalrmm.V6mz
K7AntiVirusTrojan ( 005a3d951 )
K7GWTrojan ( 005a3d951 )
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of WinGo/Riskware.TacticalRMM.A
TrendMicro-HouseCallTROJ_GEN.R002H0CCE24
KasperskyVHO:Trojan.Win32.Convagent.gen
AvastWin32:Malware-gen
SophosMal/Generic-S
F-SecureHeuristic.HEUR/AGEN.1371315
AviraHEUR/AGEN.1371315
Antiy-AVLTrojan/Win32.TacticalRMM
ZoneAlarmVHO:Trojan.Win32.Convagent.gen
CynetMalicious (score: 99)
BitDefenderThetaGen:NN.ZexaF.36802.@F0@a4x4NXdi
VBA32suspected of Trojan.Downloader.gen
MalwarebytesGeneric.Malware/Suspicious
PandaTrj/Chgt.AD
RisingTrojan.Generic@AI.81 (RDML:VIhSpq+WUS4n5eYmc6AXyQ)
MaxSecureTrojan.Malware.300983.susgen
FortinetRiskware/TacticalRMM
AVGWin32:Malware-gen
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_60% (W)
alibabacloudRiskWare:Multi/TacticalRMM.A

How to remove WinGo/Riskware.TacticalRMM.A?

WinGo/Riskware.TacticalRMM.A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment