Categories: Adware

Adposhel.Adware.BrowserHijack.DDS (file analysis)

The Adposhel.Adware.BrowserHijack.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adposhel.Adware.BrowserHijack.DDS virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
Collects information about installed applications
Collects information to fingerprint the system

Related domains:

pixieinfo.info

drivsinfosproduits.info

passportinfo.info

How to determine Adposhel.Adware.BrowserHijack.DDS?


File Info:
crc32: 1709E405md5: 93dd4c9db3b9ed57abc3ef2a15005b32name: 93DD4C9DB3B9ED57ABC3EF2A15005B32.mlwsha1: 28e7164edc65c0ad77dd6f99f31fad7e4c782ea7sha256: cb10abb78aa487658042417bfc882ec63f4dfd90e8753320079beab482e75ecbsha512: 8b718f0e7639debb016ed9edd068ad2a26ab44d5e59e059631243149b0eb5e1f958dea89308c00f5e2b99a7df83030ce5ccc4554cbbd22bb04815f2065616e5cssdeep: 24576:S+RMFvuSIZoZO/wYcJPJKjf6VN+z9TmxXy5n6ef:S+mNwZoZO/wYcJPJp+QxXy5nrtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Adposhel.Adware.BrowserHijack.DDS also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Adware.DNSUnlocker.H
FireEye	Generic.mg.93dd4c9db3b9ed57
Qihoo-360	Win32/Virus.Adware.e9e
McAfee	GenericRXDQ-SI!93DD4C9DB3B9
Cylance	Unsafe
Zillya	Adware.AdposhelGen.Win32.2
SUPERAntiSpyware	Adware.Adposhel/Variant
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 00522c7e1 )
Alibaba	AdWare:Win32/Adposhel.a709cda3
K7GW	Adware ( 0052170b1 )
Cybereason	malicious.db3b9e
Cyren	W32/S-507f6e4f!Eldorado
Symantec	SMG.Heur!gen
APEX	Malicious
Avast	Win32:Adposhel-A [Adw]
ClamAV	Win.Adware.Adposhel-9786317-0
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Adposhel.gen
BitDefender	Adware.DNSUnlocker.H
NANO-Antivirus	Trojan.Win32.Adposhel.ewrbum
Paloalto	generic.ml
ViRobot	Trojan.Win32.Adposhel.Gen.B
Tencent	Win32.Adware.Adposhel.Hupp
Ad-Aware	Adware.DNSUnlocker.H
Sophos	Adposhel (PUA)
Comodo	Application.Win32.AdWare.Adposhel.AO@7gephu
F-Secure	Adware.ADWARE/Adware.Gen7
DrWeb	Trojan.DownLoader26.8047
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0CAI21
McAfee-GW-Edition	BehavesLike.Win32.Generic.tm
Emsisoft	Application.Generic (A)
SentinelOne	Static AI – Malicious PE – Adware
Jiangmin	AdWare.Adposhel.mw
Avira	ADWARE/Adware.Gen7
Antiy-AVL	GrayWare[Adware]/Win32.Adposhel.am
Gridinsoft	Adware.Win32.Downloader.oa
Arcabit	Adware.DNSUnlocker.H
AegisLab	Adware.Win32.Adposhel.2!c
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.Adposhel.gen
GData	Adware.DNSUnlocker.H
Cynet	Malicious (score: 100)
AhnLab-V3	PUP/Win32.Adposhel.R217167
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaE.34804.TrW@ai8alwm
ALYac	Adware.DNSUnlocker.H
MAX	malware (ai score=100)
VBA32	BScope.Malware-Cryptor.Kidep
Malwarebytes	Adposhel.Adware.BrowserHijack.DDS
ESET-NOD32	a variant of Win32/Adware.Adposhel.AR
TrendMicro-HouseCall	TROJ_GEN.R002C0CAI21
Rising	Adware.Adposhel!1.AF60 (CLOUD)
Yandex	PUA.Adposhel!xxDkDBmnleg
Ikarus	AdWare.DNSUnlocker
eGambit	Unsafe.AI_Score_99%
Fortinet	Adware/Adposhel
AVG	Win32:Adposhel-A [Adw]
CrowdStrike	win/malicious_confidence_100% (D)
MaxSecure	Trojan.generickdz.41622