We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
RemoteAccess:Win32/AmmyyAdmin
Aliases: Program.Ammyy.1 (Dr.Web)
Summary
RemoteAccess:Win32/AmmyyAdmin is a detection for a remote control application that allows full control of the computer in which it is installed. This program was detected by definitions prior to 1.147.1889.0 as it violated the guidelines by which Microsoft identified unwanted software. Based on analysis using current guidelines, the program does not have unwanted behaviors. Microsoft has released definition 1.147.1889.0 which no longer detects this program.
