Should I remove “AdWare.Gaba”?

The AdWare.Gaba is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What AdWare.Gaba virus can do?

Authenticode signature is invalid
CAPE detected the shellcode get eip malware family
Anomalous binary characteristics
Yara detections observed in process dumps, payloads or dropped files

How to determine AdWare.Gaba?


File Info:
name: 05515CD8C7B100DA6E30.mlw
path: /opt/CAPEv2/storage/binaries/787c718738e787df4240148396c1b16eed880703ac3fb82760b92a167c2d5b0f
crc32: B5A32C3C
md5: 05515cd8c7b100da6e30bdb7f466418d
sha1: fc14144bc0b6a151c1453f2e65a38473cf5c2392
sha256: 787c718738e787df4240148396c1b16eed880703ac3fb82760b92a167c2d5b0f
sha512: 223e1d170eb33e16750de3ab51d9e51d3cb4534a0b7e9f3aeaa39411ca7b80bc6aa09b29f922773285d9c2bd173bf26eee7c11894e9cf8d54926fe547f0cf017
ssdeep: 6144:AninW/QbMAazn/AJYGCsHSJGlK/I3vr/wOkgFQ8D0VWj1+vGSzAD5o:AninWN3n/Gdi+r/YgFlAVWR+uho
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T118848D21F3E1C536F8E701715856872B66BD7E301B2695CBBBC42E8E5A391C27A39313
sha3_384: 915bbc41ce1dcc7bacd2502783f5ea4b4bada76884ae05050e3893adec6f4b4887a1860f9e58ddad432611b14e173f00
ep_bytes: 837c2408017505e80aaf0000ff742404
timestamp: 2009-11-23 12:48:44

Version Info:
0: [No Data]

AdWare.Gaba also known as:

Bkav	W32.Common.D7033AD1
Lionic	Adware.Win32.Gaba.2!c
Skyhigh	BehavesLike.Win32.Infected.fh
McAfee	Artemis!05515CD8C7B1
Sangfor	Trojan.Win32.Agent.Veay
CrowdStrike	win/grayware_confidence_100% (W)
NANO-Antivirus	Riskware.Win32.Agent.ehobsi
Avast	Win32:Adware-gen [Adw]
F-Secure	Heuristic.HEUR/AGEN.1302140
DrWeb	Adware.Siggen.32199
Jiangmin	AdWare/Gaba.azn
Webroot	W32.Malware.Gen
Google	Detected
Avira	HEUR/AGEN.1302140
Antiy-AVL	GrayWare[AdWare]/Win32.Gaba
Xcitium	Malware@#q7js9l4gxp6f
Cynet	Malicious (score: 100)
VBA32	AdWare.Gaba
Yandex	Trojan.GenAsa!E9uih/gVAnc
Ikarus	Trojan-Spy.Win32.Agent
AVG	Win32:Adware-gen [Adw]
DeepInstinct	MALICIOUS

How to remove AdWare.Gaba?

AdWare.Gaba removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X