Adware

Adware.MultiPlug.69 (B) (file analysis)

Malware Removal

The Adware.MultiPlug.69 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Adware.MultiPlug.69 (B) virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Behavior consistent with a dropper attempting to download the next stage.
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself
  • Creates a slightly modified copy of itself
  • Anomalous binary characteristics

Related domains:

ringmynorth.biz
center-ring.info
get-multiple.link

How to determine Adware.MultiPlug.69 (B)?


File Info:

crc32: 22E49975
md5: 41a6f8c93851e7dd42738665088acfe9
name: setup.exe
sha1: d7ff117a4a58517ad284d9e147cd4f5073f31db1
sha256: bc079ec8784a41dea9b334b8b0d16922ba7315ec12906472e89d3b535b088fe9
sha512: 6ad4cb6d2453d454e1e5f5b0c5b4f66345cb4071c63fe0f9b3c8e9f8e4946f5a8ed5b41e1ec445dacd4b5591020a4c6e62cb4b5bfe8f79a9a73784c7d94e064f
ssdeep: 3072:hhyPMvGX2gPbH1WPZBeDjR4eZVOnlIZIeEiXbHbTMjTyI2YhtRvcOX6gle2CCBHQ:h+Mu7k3E5LOeZ3EiXb7TMjIevNFQ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Adware.MultiPlug.69 (B) also known as:

MicroWorld-eScanGen:Variant.Adware.MultiPlug.69
FireEyeGeneric.mg.41a6f8c93851e7dd
CAT-QuickHealAdware.Installerex.A8
McAfeeMultiPlug
CylanceUnsafe
VIPREMultiPlug (v)
SangforMalware
K7AntiVirusUnwanted-Program ( 004c84181 )
BitDefenderGen:Variant.Adware.MultiPlug.69
K7GWUnwanted-Program ( 004c84181 )
CrowdStrikewin/malicious_confidence_100% (D)
Invinceaheuristic
BaiduWin32.Adware.Generic.bb
F-ProtW32/S-8fec2e29!Eldorado
SymantecSMG.Heur!gen
APEXMalicious
AvastWin32:MultiPlug-ABB [PUP]
ClamAVWin.Adware.Agent-1305768
GDataWin32.Trojan-Spy.Emotet.DR@gen
KasperskyHEUR:Trojan.Win32.Generic
NANO-AntivirusTrojan.Win32.WebPick.dtnytb
RisingMalware.Diplugem!8.E988 (TFE:dGZlOgWgG/ll1C7/iw)
Endgamemalicious (high confidence)
EmsisoftGen:Variant.Adware.MultiPlug.69 (B)
ComodoApplication.Win32.MultiPlug.HE@5su97b
F-SecureTrojan.TR/ATRAPS.Gen
ZillyaAdware.MultiPlug.Win32.354204
McAfee-GW-EditionBehavesLike.Win32.MultiPlug.dh
Trapminemalicious.high.ml.score
SophosMultiPlug (PUA)
IkarusTrojan.Win32.Crypt
CyrenW32/S-8fec2e29!Eldorado
JiangminTrojanDownloader.Agent.ezpz
WebrootPua.Downloadmanager
AviraTR/ATRAPS.Gen
MAXmalware (ai score=65)
Antiy-AVLTrojan[Downloader]/Win32.Agent.hfxr
MicrosoftBrowserModifier:Win32/Diplugem
ArcabitTrojan.Adware.MultiPlug.69
SUPERAntiSpywarePUP.MultiPlug/Variant
ZoneAlarmHEUR:Trojan.Win32.Generic
CynetMalicious (score: 100)
AhnLab-V3PUP/Win32.MultiPlug.R156322
Acronissuspicious
VBA32BScope.Trojan.Crossrider
ALYacGen:Variant.Adware.MultiPlug.69
Ad-AwareGen:Variant.Adware.MultiPlug.69
MalwarebytesPUP.Optional.MultiPlug
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Adware.MultiPlug.MZ
TencentMalware.Win32.Gencirc.10b0fa91
YandexPUA.MultiPlug!
SentinelOneDFI – Malicious PE
eGambitUnsafe.AI_Score_99%
FortinetW32/Generic.AC.1AC122!tr
BitDefenderThetaGen:NN.ZexaF.34128.qyZ@ayobOzhi
AVGWin32:MultiPlug-ABB [PUP]
Cybereasonmalicious.93851e
Qihoo-360HEUR/QVM10.1.CABB.Malware.Gen

How to remove Adware.MultiPlug.69 (B)?

Adware.MultiPlug.69 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment