Adware

Adware.Softcnapp.13 (B) removal tips

Malware Removal

The Adware.Softcnapp.13 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Adware.Softcnapp.13 (B) virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Presents an Authenticode digital signature
  • Dynamic (imported) function loading detected
  • Enumerates running processes
  • Expresses interest in specific running processes
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing

How to determine Adware.Softcnapp.13 (B)?



File Info:

name: 2FBE8AB4D409AD9DF2E7.mlw
path: /opt/CAPEv2/storage/binaries/e6342b01a4505f1bc1ef8b6473fc7f0b22d663516192d0185248e434f2d4e435
crc32: FA767AFC
md5: 2fbe8ab4d409ad9df2e7f6df759986b1
sha1: 9b653f1697c824d6be510d80e4a19a2a5df52855
sha256: e6342b01a4505f1bc1ef8b6473fc7f0b22d663516192d0185248e434f2d4e435
sha512: ef1f1ad9ac96269f1292d5a0c07140e14a3eae723136578197e68b2ec2cdd1404e4de29b7b86cac31ffa6867b2be018bec28f43bc1b0053fea4d4f53f7298beb
ssdeep: 49152:1eMSPiPIVu29B+txQixheaP/pnq1jh8UM3:1VSPiPyu29BuxQ1wt
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A075BF13BA818473E9D3013491BB97BB4D39A930632985E3D7901D7A5D302D17B3EBAB
sha3_384: fe09c7d9b8d3d18fa5560cda1dc5271e072d291c3c5afd472e0794e40ba4578a7adcb5524089442e228f288b5db22a85
ep_bytes: e80b060000e98efeffff558bec56ff75
timestamp: 2019-09-23 01:46:37


Version Info:

CompanyName: 
FileDescription: 
FileVersion: 1.1.3.19920
InternalName: 
LegalCopyright: Copyright (C) 2019
OriginalFilename: Host.exe
ProductName: 
ProductVersion: 1,1,3,19920
Translation: 0x0804 0x04b0

Adware.Softcnapp.13 (B) also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Adware.Softcnapp.13
McAfeePUP-XNQ-GH
CylanceUnsafe
ZillyaAdware.Burden.Win32.1569
CrowdStrikewin/grayware_confidence_100% (W)
K7GWAdware ( 005567a91 )
K7AntiVirusAdware ( 005567a91 )
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Adware-gen [Adw]
AlibabaAdWare:Win32/Softcnapp.ba79203e
Ad-AwareGen:Variant.Adware.Softcnapp.13
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0PGO21
EmsisoftGen:Variant.Adware.Softcnapp.13 (B)
JiangminAdWare.Burden.adh
WebrootW32.Adware.Gen
AviraPUA/Softcnapp.Gen
Antiy-AVLGrayWare/Win32.CoinMiner
ViRobotAdware.Softcnapp.1649552
CynetMalicious (score: 100)
ALYacGen:Variant.Adware.Softcnapp.13
MAXmalware (ai score=65)
VBA32BScope.Adware.Softcnapp
MalwarebytesPUP.Optional.ChinAd
TrendMicro-HouseCallTROJ_GEN.R002C0PGO21
MaxSecureAdware.WIN32.Burden.gen_221003
FortinetAdware/Softcnapp.BF
AVGWin32:Adware-gen [Adw]
Cybereasonmalicious.4d409a
PandaTrj/CI.A

How to remove Adware.Softcnapp.13 (B)?

Adware.Softcnapp.13 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment