How to remove old_amigo.exe

old_amigo.exe

The module old_amigo.exe has been detected as Hijack.Explorer

old_amigo.exe
Remove old_amigo.exe

File Details

Product Name:

Amigo
Company Name:

Mail.Ru
MD5: 3a2a86cdeec155a1eea8ada2d1cc9b00
Size: 908 KB
First Published: 2017-05-21 06:07:26 (6 years ago)
Latest Published: 2019-06-15 11:38:26 (4 years ago)
Status: Hijack.Explorer (on last analysis)
Analysis Date: 2019-06-15 11:38:26 (4 years ago)

Common Places:

%localappdata%\amigo\application
%sysdrive%\adwcleaner\quarantine\files\djsiikotrfxdjnxqfhqznouhmsjxixwj\application
%sysdrive%\adwcleaner\quarantine\files\strtgwcgeedmprtvnwvquhwpcxwazacv\application
%localappdata%\amigo\temp\scoped_dir_4664_20077
%sysdrive%\adwcleaner\quarantine\files\tlrbgvupvfowqpgkuvqvhrwivhhxnvvd\application
%sysdrive%\adwcleaner\quarantine\files\pqpanidhlcdavlguvtlvntcwqqgurkox\application
%localappdata%\amigo\temp\scoped_dir_10464_886
%localappdata%\amigo\temp\scoped_dir_7820_12668
%localappdata%\amigo\temp\scoped_dir_3156_19219
%localappdata%\amigo\temp\source2696_12491\chrome-bin

File Names:

amigo.exe
old_amigo.exe
new_amigo.exe

Geography:

33.7%
30.7%
8.6%
4.3%
3.7%
3.7%
3.7%
3.1%
2.5%
1.8%
1.2%
0.6%
0.6%
0.6%
0.6%
0.6%

OS Version:

Windows 10 51.5%
Windows 7 36.2%
Windows 8.1 8.6%
Windows 8 3.7%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000495d0

PE Sections:

Name Size of data MD5
.text 550400 e6f54a1442d0cb77dad98e00e5fa62c4
.rdata 181248 4c1c7056998c08ca42d9150a68c8ac32
.data 4096 af48778969e3d56e4864f91fc03e424f
.didat 512 903d8dfefc37bd0961244813c3e08dd6
.tls 512 bf619eac0cdf3f68d496ea9344137e8b
.rsrc 162816 a0a7d3d1b5724f09c118915e9caa3670
.reloc 22528 e473d30dafed86975cbd4de4932882a3

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for old_amigo.exe
copyright for information about old_amigo.exe