Adware.RealMedia.B malicious file

The Adware.RealMedia.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Adware.RealMedia.B virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Performs HTTP requests potentially not found in PCAP.
Authenticode signature is invalid
Attempts to modify proxy settings

How to determine Adware.RealMedia.B?


File Info:
name: A77B3C1A8B0D555289AA.mlw
path: /opt/CAPEv2/storage/binaries/9a589d11a9a67799c3d0814c88034afb1da4792e6d5e8f83fce5bbcda8c411f2
crc32: E7CBF1A0
md5: a77b3c1a8b0d555289aa06345c9d862c
sha1: 2271cf08e6ad9eddd841815c53608c5c8b5aa4ef
sha256: 9a589d11a9a67799c3d0814c88034afb1da4792e6d5e8f83fce5bbcda8c411f2
sha512: f057692be9ac08e1da6ba93705b926d4397ffc81674c4bc80dc213f68e7673a955c944d7caedc6d2b87ff6999530178fe4797f53ae04592898ae6231be190602
ssdeep: 49152:Kt7zcIw3OYA6enOpphsPUYABpkXQ66w5P4jDL7L:M43bzphdw5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D3759D217545D876C53182B05B3EABE8825DE9600B6289C7B3CC4E2D0BB92D37B37F56
sha3_384: fc3e2374676ef208b18726e0d3b4674a94f50b52b773b569d464f5f945eeac0e1f5c1456c08ad704450140a8d8dc5439
ep_bytes: e8f70d0000e974feffff3b0d74705200
timestamp: 2020-06-16 08:58:42

Version Info:
FileDescription: Extractor for bundler
FileVersion: 3.3.11.0
InternalName: Extractor.exe
LegalCopyright: Copyright (C) 2018
OriginalFilename: Extractor.exe
ProductName: Extractor
ProductVersion: 3.3.11.0
Translation: 0x0409 0x04b0

Adware.RealMedia.B also known as:

Lionic	Riskware.Win32.RealMedia.1!c
MicroWorld-eScan	Adware.RealMedia.B
FireEye	Adware.RealMedia.B
ALYac	Adware.RealMedia.B
Cylance	Unsafe
Sangfor	PUP.Win32.Presenoker.mt
BitDefender	Adware.RealMedia.B
Cybereason	malicious.a8b0d5
Arcabit	Adware.RealMedia.B
BitDefenderTheta	Gen:NN.ZexaF.34114.Hv0@aSL!UIhk
APEX	Malicious
ViRobot	Adware.Realmedia.1603072
Rising	Trojan.Generic@ML.97 (RDMK:ZHhrVzKvkUlyFKQmipRa7g)
Ad-Aware	Adware.RealMedia.B
Sophos	Generic PUA CC (PUA)
DrWeb	Trojan.DownLoader33.55255
McAfee-GW-Edition	BehavesLike.Win32.Dropper.th
Emsisoft	Adware.RealMedia.B (B)
MAX	malware (ai score=68)
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Adware.RealMedia.B
McAfee	Artemis!A77B3C1A8B0D
VBA32	Trojan.Downloader
TrendMicro-HouseCall	TROJ_GEN.R002H09GO21
eGambit	Unsafe.AI_Score_99%

How to remove Adware.RealMedia.B?

Adware.RealMedia.B removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X