Malware

How to remove “AdWare.Win32.Kuaiba.aey”?

Malware Removal

The AdWare.Win32.Kuaiba.aey is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What AdWare.Win32.Kuaiba.aey virus can do?

  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Queries information on disks, possibly for anti-virtualization
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
css.jipinfeiche.cn

How to determine AdWare.Win32.Kuaiba.aey?


File Info:

crc32: 3F7E8EB2
md5: 4783b69e5f4e1a24353cacbe1143e796
name: zhuangjialiechewudiban.exe
sha1: 6409f46a1c423a63e20bc5253e438e5b7f2172bc
sha256: 74c65d0f5fde0edd01f9ec8f7ed9c6eb7eaa754d6c6161ef7a70f8fae3d0d5a0
sha512: 2473b06b3307172886421628e5ae255ccc14c70d24a6287e0a4fdd547a741c04d8c1cb9b0d9ec3d773fe9f62257bdcefc62b3315196efa17dcdde2ba9ee27c38
ssdeep: 393216:hIQb3kuES25Irmh+7K8/+ZIoW/sq11IQb3kuES25Irmh+7K8/+ZIoW/sqh+YvIAB:brnX+h+82hWnqCKr1CBm
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2015
InternalName: x6e38x620fx5b89x88c5x7a0bx5e8f
FileVersion: 1, 0, 0, 2
ProductName: x6e38x620fx5b89x88c5x7a0bx5e8f
ProductVersion: 1, 0, 0, 2
FileDescription: x6e38x620fx5b89x88c5x7a0bx5e8f
OriginalFilename: setup.exe
Translation: 0x0804 0x04b0

AdWare.Win32.Kuaiba.aey also known as:

DrWebTrojan.StartPage1.58502
MicroWorld-eScanTrojan.GenericKD.32643178
CAT-QuickHealPua.Kuaiba.A5
Qihoo-360HEUR/QVM41.2.Malware.Gen
McAfeePUP-XFC-LJ
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusAdware ( 004b87351 )
BitDefenderTrojan.GenericKD.32643178
K7GWAdware ( 004b87351 )
Cybereasonmalicious.e5f4e1
TrendMicroHT_GRAFTOR_GC140139.UVPM
F-ProtW32/Startpage.CK.gen!Eldorado
SymantecTrojan.Gen.2
APEXMalicious
AvastWin32:AdwareX-gen [Adw]
ClamAVWin.Adware.Kuaiba-16
GDataTrojan.GenericKD.32643178
Kasperskynot-a-virus:AdWare.Win32.Kuaiba.aey
AlibabaAdWare:Win32/Kuaiba.cb14bc70
NANO-AntivirusRiskware.Win32.Kuaiba.eaecvc
AegisLabAdware.Win32.Kuaiba.mDzu
RisingTrojan.Generic@ML.100 (RDMK:JESSqBOlvlfi8FplJzMF5Q)
Ad-AwareTrojan.GenericKD.32643178
EmsisoftTrojan.GenericKD.32643178 (B)
ComodoApplicUnwnt@#32uong1edrtip
F-SecureAdware.ADWARE/Adware.Gen7
BaiduWin32.Adware.kuaiba.a
ZillyaAdware.Kuaiba.Win32.21
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.wc
FireEyeGeneric.mg.4783b69e5f4e1a24
SophosGeneric PUA ND (PUA)
IkarusPUA.Kuaiba
CyrenW32/Startpage.CK.gen!Eldorado
JiangminAdware.Adware.aoz
WebrootW32.Adware.Gen
AviraADWARE/Adware.Gen7
MAXmalware (ai score=83)
Endgamemalicious (high confidence)
ArcabitTrojan.Generic.D1F2186A
ZoneAlarmnot-a-virus:AdWare.Win32.Kuaiba.aey
MicrosoftAdware:Win32/Kuaiba.A
AhnLab-V3PUP/Win32.Kuaiba.R183989
Acronissuspicious
VBA32AdWare.Kuaiba
ALYacTrojan.GenericKD.32643178
MalwarebytesAdware.Kuaiba
PandaTrj/CI.A
ESET-NOD32a variant of Win32/Adware.Kuaiba.A
TrendMicro-HouseCallHT_GRAFTOR_GC140139.UVPM
TencentMalware.Win32.Gencirc.10b3c917
YandexPUA.Kuaiba!
SentinelOneDFI – Malicious PE
eGambitUnsafe.AI_Score_99%
FortinetAdware/Generic
AVGWin32:AdwareX-gen [Adw]
CrowdStrikewin/malicious_confidence_80% (D)
MaxSecureWin.MxResIcn.Heur.Gen

How to remove AdWare.Win32.Kuaiba.aey?

AdWare.Win32.Kuaiba.aey removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment