Categories: Adware

Adware.AAuto information

The Adware.AAuto is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adware.AAuto virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Performs HTTP requests potentially not found in PCAP.
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Detects Bochs through the presence of a registry key
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Adware.AAuto?


File Info:
name: 3B0B9B9145F7EA8BCAA4.mlwpath: /opt/CAPEv2/storage/binaries/ae7e21cf7f0cd998956b94ab49ae78e6ae59da280066128dc0d037120fc7a35ccrc32: 4C4238BFmd5: 3b0b9b9145f7ea8bcaa42beb6b795d7csha1: 161fb1efd96f7928796db1a54b7a946100b45354sha256: ae7e21cf7f0cd998956b94ab49ae78e6ae59da280066128dc0d037120fc7a35csha512: 4390e9baed4142bd3783d7a6228e2a26af33207ed7dea62cc48dd8db90728c49025f82c7b86d863aa9bf83eec8f545d8bd70fa5ff3c0b5161fa40bf7f956eeeessdeep: 12288:ziuJ0RtB+petxQa0Ikg1QO8yzQ7+5j1B1YV1/7zcY7D9Mh5QE+UET63MDkoSdT:zxJ0Rr+Cf8d651gzj7c5/8DaTtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T17F153383D3E0E259D0636231ADFA175D2F51662396C053F37B68987F874038A9F8663Csha3_384: 1817904fe727c4f581ad1fcc8201ce6418062d85d1ac98446160cad3bfe36152e830d6f288f2e9848d9d4cf1a8957d4bep_bytes: 60be008061008dbe0090deff5789e58dtimestamp: 2022-11-23 20:38:43
Version Info:
CompanyName: 深圳特鹏网络有限公司FileDescription: 溜云库启动程序FileVersion: 0.0.0.226InternalName: LiuYunKuLegalCopyright: Copyright (C) Maple 2022OriginalFilename: LiuYunKu.exeProductName: LiuYunKuProductVersion: 0.0.0.226Translation: 0x0009 0x04b0

Adware.AAuto also known as:

Bkav	W32.Common.736E1978
Lionic	Trojan.Win32.Generic.4!c
CAT-QuickHeal	Trojan.GenericRI.S28991494
McAfee	Artemis!3B0B9B9145F7
Malwarebytes	Generic.Trojan.Malpack.DDS
Zillya	Trojan.AAuto.Win32.232
K7AntiVirus	Trojan ( 00577fe81 )
K7GW	Trojan ( 00577fe81 )
CrowdStrike	win/grayware_confidence_70% (D)
Cyren	W32/ABRisk.VAOV-2627
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/Packed.AAuto.B suspicious
APEX	Malicious
Avast	Win32:Evo-gen [Trj]
McAfee-GW-Edition	GenericRXTZ-DO!714D171B53F1
ViRobot	Trojan.Win.Z.Aauto.956520
Google	Detected
AhnLab-V3	Malware/Win32.RL_Generic.R266431
VBA32	Adware.AAuto
Cylance	unsafe
Rising	Trojan.Occamy!8.F1CD (CLOUD)
Yandex	Trojan.GenAsa!uDgyVfKmTBk
Ikarus	PUA.AAuto
MaxSecure	Trojan.Malware.195344165.susgen
Fortinet	Riskware/Application
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS