Categories: Adware

What is “Adware.SmsHoax.167”?

The Adware.SmsHoax.167 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adware.SmsHoax.167 virus can do?

Sample contains Overlay data
Reads data out of its own binary image
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Anomalous binary characteristics
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Adware.SmsHoax.167?


File Info:
name: 2DF412A4FD5F0170BB19.mlwpath: /opt/CAPEv2/storage/binaries/8fce4b73d789c122aa90a8db0438c2adc69d643649e2e5c4df84d7b3768c6c79crc32: C2225F13md5: 2df412a4fd5f0170bb19676defd03ddcsha1: 14239a55d15dd07321ac80d48b96303a3e42799csha256: 8fce4b73d789c122aa90a8db0438c2adc69d643649e2e5c4df84d7b3768c6c79sha512: 49cbd402689948b663d18a4b821873cbfc5e3b86a92bb95c08e566035984bdd6f3d52a7e56bb22cea5f41aa615e5d35c52a2a99473cf2e0a0ffcdeebaf397ed9ssdeep: 49152:Vp7M/SzhyhZ+njgVwnD3lH1THNHltpgZu7To/PjssKzVewMMMMMMMMMMMMMMMMM3:Vp7tz4+ThHyM7To/PopzVzMMMMMMMMMntype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T195B533F262E80563E43346F3ADC6D96878AEE871535A5327E254F04FAA7B30163425FCsha3_384: 82f4f496fb0d54d4f0e5ad6beab5a443f26532a59a6f54b62d2490b20bacf4c236ec3e9b0df3de4a128ceca0ffdc81b4ep_bytes: 60be0040a9008dbe00d096ffc787209ctimestamp: 2013-12-04 07:51:39
Version Info:
FileVersion: 1.0.0.0ProductVersion: 1.0.0.0Translation: 0x0409 0x04e4

Adware.SmsHoax.167 also known as:

tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Adware.SmsHoax.167
FireEye	Generic.mg.2df412a4fd5f0170
ALYac	Gen:Variant.Adware.SmsHoax.167
Malwarebytes	Bladabindi.Backdoor.Bot.DDS
VIPRE	Gen:Variant.Adware.SmsHoax.167
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/grayware_confidence_90% (W)
VirIT	Trojan.Win32.InstallMonster.BM
Symantec	Trojan.ADH
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/InstallMonstr.AI potentially unwanted
APEX	Malicious
ClamAV	Win.Adware.Agent-1230852
Kaspersky	not-a-virus:HEUR:AdWare.Win32.InstallMonster.gen
BitDefender	Gen:Variant.Adware.SmsHoax.167
NANO-Antivirus	Trojan.Win32.InstallMonster.dbipfy
Avast	Win32:InstallMonstr-DK [PUP]
Tencent	Trojan.Win32.Inject.vdj
Emsisoft	Gen:Variant.Adware.SmsHoax.167 (B)
F-Secure	Adware.ADWARE/InstMonster.Gen
DrWeb	Trojan.InstallMonster.38
Zillya	Trojan.Inject.Win32.72315
TrendMicro	TROJ_GEN.R03BC0OD623
McAfee-GW-Edition	BehavesLike.Win32.PUP.vc
Trapmine	malicious.high.ml.score
Sophos	Generic ML PUA (PUA)
GData	Gen:Variant.Adware.SmsHoax.167
Jiangmin	Trojan/Inject.axzv
Google	Detected
Avira	ADWARE/InstMonster.Gen
Antiy-AVL	RiskWare[Downloader]/Win32.Monstruos
Arcabit	Trojan.Adware.SmsHoax.167
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.InstallMonster.gen
Microsoft	Program:Win32/Wacapew.C!ml
Cynet	Malicious (score: 99)
AhnLab-V3	PUP/Win32.InstallMonster.R91037
Acronis	suspicious
McAfee	Artemis!2DF412A4FD5F
MAX	malware (ai score=68)
VBA32	BScope.Adware.InstallMonster
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R03BC0OD623
Rising	PUA.InstallMonstr!8.EA (CLOUD)
Yandex	PUA.Downloader!paXykAtpbh8
Ikarus	Trojan-PSW.Banker6
Fortinet	Adware/InstallMonstr
AVG	Win32:InstallMonstr-DK [PUP]
DeepInstinct	MALICIOUS