Categories: Adware

Adware.LoadMoney (file analysis)

The Adware.LoadMoney is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adware.LoadMoney virus can do?

Executable code extraction
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
A process attempted to delay the analysis task.
Detects Avast Antivirus through the presence of a library
Attempts to remove evidence of file being downloaded from the Internet
Anomalous binary characteristics

Related domains:

forces.biozoro.ru

How to determine Adware.LoadMoney?


File Info:
crc32: A0E5D042md5: ea0487cd3f17f29b925258c2ae41e364name: 1418899102_assassinscreedivblackflagv101plus22trainer.exesha1: 2fe490c92cd3259e9d94e1f85674114139049036sha256: 1d7f07113cb52a10069fb7c1d89aad516b88cf2f027e6e2fcc31b21e891ab129sha512: ec60d54e4cc5467d7d7692ee4566b169d4cfbc525d88abfddc5274b7033c37added43f3cf839fffe2c49456566769950c7197ccf795a3b47952f4c07cfac99f3ssdeep: 6144:2djuQdM+Isrq7yIh7on3KyOW4vPnehbJUtzPrhVvI+RqmZGW6Qs9btwOSrMzE0V:veCAZaH4Utbx6Q2JwOSrMzE0VRhzdtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright 2013 Bunndle, Inc.  All rights reserved.InternalName: BunndleOfferManagerFileVersion: 1.0.0.4CompanyName: Bunndle, Inc.ProductName: Bunndle Stand-Alone Offer Manager, OM 2.4.0.0, 2013-09-18 11:24ProductVersion: 1.0.0.4FileDescription: Bunndle Stand-Alone Offer ManagerOriginalFilename: BunndleOfferManagerTranslation: 0x0409 0x04e4

Adware.LoadMoney also known as:

Bkav	HW32.Packed.AD4C
MicroWorld-eScan	Gen:Variant.Razy.11216
CAT-QuickHeal	PUA.Ogimant.OL9
McAfee	Packed-CQ
Cylance	Unsafe
Zillya	Adware.LoadMoneyGen.Win32.7
K7GW	Adware ( 004b8cd51 )
K7AntiVirus	Adware ( 004b8cd51 )
Arcabit	Trojan.Razy.D2BD0
Invincea	heuristic
Baidu	Win32.Adware.Kryptik.c
Cyren	W32/S-b7023a5a!Eldorado
Symantec	PUA.Gen.2
TrendMicro-HouseCall	TROJ_GEN.R01FC0PLH17
Avast	Win32:Heim
ClamAV	Win.Trojan.Agent-1380427
Kaspersky	not-a-virus:Downloader.Win32.LMN.rrta
BitDefender	Gen:Variant.Razy.11216
NANO-Antivirus	Trojan.Win32.LMN.dkpvsv
AegisLab	Troj.Downloader.W32.CodecPack.lly4
Tencent	Suspicious.Heuristic.Gen.b.0
Ad-Aware	Gen:Variant.Razy.11216
Emsisoft	Gen:Variant.Razy.11216 (B)
Comodo	Application.Win32.LoadMoney.RA
F-Secure	Gen:Variant.Razy.11216
DrWeb	Trojan.LoadMoney.1493
VIPRE	Trojan.Win32.Generic.pak!cobra
TrendMicro	TROJ_GEN.R01FC0PLH17
McAfee-GW-Edition	BehavesLike.Win32.Packed.gh
Sophos	Troj/LdMon-J
Ikarus	PUA.Hacktool.Everest
F-Prot	W32/S-b7023a5a!Eldorado
Jiangmin	Packed.Krap.evjn
Avira	PUA/LoadMoney.Gen7
Antiy-AVL	RiskWare[Downloader]/Win32.LMN.rrta
Microsoft	SoftwareBundler:Win32/Ogimant
Endgame	malicious (high confidence)
ZoneAlarm	not-a-virus:Downloader.Win32.LMN.rrta
GData	Gen:Variant.Razy.11216
AhnLab-V3	PUP/Win32.LoadMoney.R128915
ALYac	Gen:Variant.Razy.11216
AVware	Trojan.Win32.Generic.pak!cobra
MAX	malware (ai score=89)
VBA32	Malware-Cryptor.Limpopo
Malwarebytes	Adware.LoadMoney
WhiteArmor	Malware.HighConfidence
ESET-NOD32	a variant of Win32/Adware.LoadMoney.AEO
SentinelOne	static engine – malicious
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/Kryptik.CTUA!tr
AVG	Win32:Heim
Cybereason	malicious.1b8fb7
Panda	Trj/Genetic.gen
CrowdStrike	malicious_confidence_100% (D)
Qihoo-360	HEUR/QVM20.1.EA0B.Malware.Gen