Categories: Adware

Adware.Generic.3006116 (file analysis)

The Adware.Generic.3006116 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adware.Generic.3006116 virus can do?

Creates RWX memory
Dynamic (imported) function loading detected
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Adware.Generic.3006116?


File Info:
name: DB989A293604D3766F51.mlwpath: /opt/CAPEv2/storage/binaries/1e24877576f4b74e745f183e81bbb51c0e636d82451cb914b3faf6c152bcc03bcrc32: 3BF0E9B4md5: db989a293604d3766f510fcad386fb31sha1: 20a3b97e96e1866474683c3217901149362f5176sha256: 1e24877576f4b74e745f183e81bbb51c0e636d82451cb914b3faf6c152bcc03bsha512: 3b4c84effa91a3e15ca1e54d2ee8835af3bd3c59a5e3339f8c81ebeabdc3e8022c86fa11333cf77ce37048b40975bd830d68ba8b4a1acfaa4d1837a66ac7d53dssdeep: 98304:YVrNnD2MAyoI73vcSBJrhofyMH7cha8UXEqFimzJIy:YVrUMAycSIygAa3+mmytype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1C5363342A1ACB7D3D5C36A38361414A1DF928339611DB6CBD6F582A42736F7F29C1273sha3_384: 45dead7317f1f7449dc79d2121c02bf8139e693f7d6f26e19dc06e68acf3cbe201dc2f265ef6017b416178a1d4d7885bep_bytes: 81ec8001000053555633db57895c2418timestamp: 2009-12-05 22:50:46
Version Info:
FileDescription: Producer shdFileVersion: LegalCopyright: (C)ProductName: Translation: 0x0804 0x04e4

Adware.Generic.3006116 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Riskware.Win32.Generic.1!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Adware.Generic.3006116
FireEye	Adware.Generic.3006116
ALYac	Adware.Generic.3006116
Cylance	Unsafe
Sangfor	Riskware.Win32.Wacapew.C
CrowdStrike	win/malicious_confidence_70% (W)
Alibaba	TrojanDropper:Win32/Ramnit.86f7c3cf
K7GW	Trojan ( 0050b64b1 )
K7AntiVirus	Trojan ( 0050b64b1 )
Arcabit	Adware.Generic.D2DDEA4
Cyren	W32/Dropper.DS.gen!Eldorado
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of NSIS/TrojanDropper.Agent.BT
APEX	Malicious
ClamAV	Win.Trojan.Ramnit-9753960-0
BitDefender	Adware.Generic.3006116
NANO-Antivirus	Trojan.Win32.RDN.eikobp
Avast	Win32:Adware-gen [Adw]
Ad-Aware	Adware.Generic.3006116
Sophos	Mal/Agent-AUG
Comodo	TrojWare.Win32.Injector.KRTE@57zc23
F-Secure	Trojan.TR/Drop.Agent.mobnd
DrWeb	Adware.Searcher.1222
Zillya	Dropper.Agent.Win32.430081
TrendMicro	TROJ_GEN.R002C0RDJ22
McAfee-GW-Edition	BehavesLike.Win32.BadFile.rc
Emsisoft	Adware.Dropper (A)
SentinelOne	Static AI – Malicious PE
Avira	TR/Drop.Agent.mobnd
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
ViRobot	Trojan.Win32.Z.Agent.4931298
GData	Adware.Generic.3006116
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	Artemis!DB989A293604
MAX	malware (ai score=65)
VBA32	Adware.Searcher
Malwarebytes	Trojan.ChinAd
TrendMicro-HouseCall	TROJ_GEN.R002C0RDJ22
Ikarus	Win32.Ramnit
AVG	Win32:Adware-gen [Adw]
Cybereason	malicious.e96e18