AdRepack.Adware.Packer.DDS (file analysis)

The AdRepack.Adware.Packer.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What AdRepack.Adware.Packer.DDS virus can do?

Sample contains Overlay data
Reads data out of its own binary image
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine AdRepack.Adware.Packer.DDS?


File Info:
name: 0936488D4A14A13F62B1.mlw
path: /opt/CAPEv2/storage/binaries/fd64b8e437a36237cb65d67b8f9ffcc58ab83c4f2a6e3e2e8c495361e109f853
crc32: 73268A03
md5: 0936488d4a14a13f62b1d940bdf563ed
sha1: a65df7cd397d6b1b9845fe50c9e58d099b083c4b
sha256: fd64b8e437a36237cb65d67b8f9ffcc58ab83c4f2a6e3e2e8c495361e109f853
sha512: 4f56de09e51af1ab883db50d7911537624cbf4e227044b88c7f8520923b3049552efc01d156b4942d802d8253a9a4be17b6c248f5a30fcddaa75e62840ca0be6
ssdeep: 12288:5Qnk3GDYKGcblBY8t7YhbBNgszdnBnA6n:zAOcZBYThVNgsnnxn
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11BA4E102B6D28472D57329325A39BB15AE3D7D201F24DA2FB3E44D6CDF75181A234BA3
sha3_384: 585e68349684710f877f6f2f4b4fa5ee83ab6ce2895933e8558b09ac21c1b48aab308d8a5b22a54196afc11278385de1
ep_bytes: e89a040000e98efeffff3b0d68d64300
timestamp: 2020-03-26 10:02:47

Version Info:
0: [No Data]

AdRepack.Adware.Packer.DDS also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
FireEye	Generic.mg.0936488d4a14a13f
Malwarebytes	AdRepack.Adware.Packer.DDS
Sangfor	Trojan.Win32.Agent.Vf2t
CrowdStrike	win/malicious_confidence_70% (W)
K7GW	Riskware ( 00584baa1 )
K7AntiVirus	Riskware ( 00584baa1 )
Symantec	Trojan.Gen.9
APEX	Malicious
Cynet	Malicious (score: 100)
ViRobot	Trojan.Win.Z.Genetic.454846
McAfee-GW-Edition	BehavesLike.Win32.Generic.gc
Webroot	W32.Trojan.Gen
AhnLab-V3	Malware/Win.Trojanspy.R430895
McAfee	RDN/Generic PWS.y
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002H06CC23
MaxSecure	Trojan.Malware.300983.susgen
DeepInstinct	MALICIOUS

How to remove AdRepack.Adware.Packer.DDS?

AdRepack.Adware.Packer.DDS removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X