Categories: Adware

Adware.Generic.3026065 removal tips

The Adware.Generic.3026065 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adware.Generic.3026065 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
Creates RWX memory
Dynamic (imported) function loading detected
Performs HTTP requests potentially not found in PCAP.
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is likely packed with VMProtect
Authenticode signature is invalid
Tries to suspend Cuckoo threads to prevent logging of malicious activity
Tries to unhook or modify Windows functions monitored by Cuckoo
Attempts to modify proxy settings

How to determine Adware.Generic.3026065?


File Info:
name: 05B748CB95896D787C7A.mlwpath: /opt/CAPEv2/storage/binaries/aa1a4abf726637c1b7dc5918ffea7984d4129e9ccbb0a983d49cfe01265fb824crc32: 946DCB4Dmd5: 05b748cb95896d787c7ad5347f5f00a5sha1: 2c34cf37526f2066d2f8682a8056afb4d72aa0cbsha256: aa1a4abf726637c1b7dc5918ffea7984d4129e9ccbb0a983d49cfe01265fb824sha512: 8cde9862e28498e5049a4a01cbcdeebbf3a843bfe97e31b747b924a998bb255f11f18b5fab5c4a30049d7c3f0e798f555f5bc9a46fbf719952b11be33bac213cssdeep: 196608:wsYb5Njosab2mUWYv7ZeMUZItEIOM+kP:B0Pl77ZxWItUMtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T111662373F1E5D001E9F5843D5627FDA532F63BEA4A815C74A1EABDC439219E1A233823sha3_384: 7fdf3ddb8b91c0214d94a870723c60045ddca0c8654b6ed661be859ce8252a2c5edf99cd6933dc79a9916cb691d77285ep_bytes: 687f993117e8caececff9c660fbccd80timestamp: 2021-08-28 08:08:17
Version Info:
FileVersion: 8.4.0.0FileDescription: 莫名ProductName: 莫名ProductVersion: 8.4.0.0CompanyName: 莫名LegalCopyright: 莫名
Comments: 莫名Translation: 0x0804 0x04b0

Adware.Generic.3026065 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Malicious.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Adware.Generic.3026065
FireEye	Generic.mg.05b748cb95896d78
ALYac	Adware.Generic.3026065
Cylance	Unsafe
Sangfor	Trojan.Win32.Tnega.ml
K7AntiVirus	Adware ( 004b8e1b1 )
K7GW	Adware ( 004b8e1b1 )
BitDefenderTheta	Gen:NN.ZexaF.34114.@B0@ayvZUMab
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/FlyStudio.Packed.AO potentially unwanted
TrendMicro-HouseCall	TROJ_GEN.R067H09LP21
Paloalto	generic.ml
BitDefender	Adware.Generic.3026065
Avast	Win32:Malware-gen
Ad-Aware	Adware.Generic.3026065
Sophos	Generic PUA CM (PUA)
Comodo	TrojWare.Win32.Agent.ISVQ@5mbonp
McAfee-GW-Edition	BehavesLike.Win32.Generic.vc
Emsisoft	Adware.Generic.3026065 (B)
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=65)
Microsoft	Program:Win32/Uwamson.A!ml
Gridinsoft	Ransom.Win32.Wacatac.sa
GData	Adware.Generic.3026065
Cynet	Malicious (score: 100)
AhnLab-V3	Adware/Win.Malware-gen.C4868620
McAfee	Artemis!05B748CB9589
Malwarebytes	Malware.AI.3965714267
APEX	Malicious
Rising	Malware.Heuristic!ET#95% (RDMK:cmRtazpGxD4z7zJx+hKPbgl6Pyrt)
Ikarus	Trojan.Win32.Krypt
Fortinet	Malicious_Behavior.SB
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_60% (W)