What is “Adware.Navipromo.5”?

The Adware.Navipromo.5 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Adware.Navipromo.5 virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Adware.Navipromo.5?


File Info:
name: ECAA098F0A23ECDDFFA0.mlw
path: /opt/CAPEv2/storage/binaries/198701ab771e1082208c435c87b99caad485137c6de564f7885b1662f7b0c9dd
crc32: 3AECFA93
md5: ecaa098f0a23ecddffa0bdd7541bff28
sha1: a3678b9bdacf095971ff4ff3511058ef06c61f00
sha256: 198701ab771e1082208c435c87b99caad485137c6de564f7885b1662f7b0c9dd
sha512: 87139fe64a6d861f099f2c94b3555d298e1916ab026e78165e75e712f58c41e2a24fca3f4753342d4a53cdfa139fead47e6b1e2d297e9b870aeb5f592449478b
ssdeep: 49152:rNDEbEXF4cF9vEcDtWjr9iwvxz68zy108/V:lEbEmcfEgtWdfvxz68uu8t
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1ECF557A520107876C7F51937F03DF8B544261D1B8F0616ABA6F4FEAF72FAA28902D153
sha3_384: 7347dd86f8916ec34dc6f44c18435802f61abce2ddb47f77b657d531f6ccb322fb330f871f396e31d6b417475242cbd1
ep_bytes: 81ece4070000535657c744240c000000
timestamp: 2004-07-19 20:48:09

Version Info:
0: [No Data]

Adware.Navipromo.5 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Adware.Navipromo.5
FireEye	Generic.mg.ecaa098f0a23ecdd
Skyhigh	Downloader-BPJ.gen.h
ALYac	Gen:Variant.Adware.Navipromo.5
Cylance	unsafe
Zillya	Downloader.LiplerGen.Win32.2
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (D)
Alibaba	Trojan:Win32/Skintrim.ed61e2b7
K7GW	Trojan ( f10008011 )
K7AntiVirus	Trojan ( f10008011 )
ESET-NOD32	a variant of Win32/Skintrim.EE
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Adware.Navipromo.5
NANO-Antivirus	Trojan.Win32.Lipler.bjybw
Avast	Win32:Hrupka-A [Cryp]
Tencent	Malware.Win32.Gencirc.114d81d5
Emsisoft	Gen:Variant.Adware.Navipromo.5 (B)
F-Secure	Adware:W32/Wintrim.gen!P
DrWeb	Trojan.Packed.685
VIPRE	Gen:Variant.Adware.Navipromo.5
TrendMicro	TROJ_LIPLER.SMI
Trapmine	malicious.high.ml.score
Sophos	Mal/Swizzor-H
Jiangmin	TrojanDownloader.Lipler.alz
Google	Detected
Avira	TR/Crypt.ZPACK.Gen2
Antiy-AVL	Trojan/Win32.AGeneric
Kingsoft	Win32.Trojan.Generic.a
Microsoft	Adware:Win32/Lollipop
Xcitium	TrojWare.Win32.TrojanDownloader.Lipler.d8@1ej9oz
Arcabit	Trojan.Adware.Navipromo.5
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Adware.Navipromo.5
Varist	W32/Wintrim.B.gen!Eldorado
AhnLab-V3	Win-Trojan/Lipler.Gen
McAfee	Downloader-BPJ.gen.h
MAX	malware (ai score=99)
VBA32	SScope.Trojan.Lipler.03
Malwarebytes	Generic.Malware.AI.DDS
Panda	Adware/NaviPromo
TrendMicro-HouseCall	TROJ_LIPLER.SMI
Rising	Downloader.Skintrim!1.9A1D (CLASSIC)
Yandex	Trojan.DL.Wintrim.Gen!Pac.2
Ikarus	Trojan-Downloader.Win32.Lipler
MaxSecure	Virus.Downloader.Lipler.IML
Fortinet	W32/Lipler.IML!tr.dldr
AVG	Win32:Hrupka-A [Cryp]
DeepInstinct	MALICIOUS

How to remove Adware.Navipromo.5?

Adware.Navipromo.5 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X