Malware

About “AdWare.Win32.VKDJ.dpnq” infection

Malware Removal

The AdWare.Win32.VKDJ.dpnq is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What AdWare.Win32.VKDJ.dpnq virus can do?

  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Dynamic (imported) function loading detected
  • Unconventionial language used in binary resources: Russian
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine AdWare.Win32.VKDJ.dpnq?


File Info:

name: 30EB08E834EE6865FA17.mlw
path: /opt/CAPEv2/storage/binaries/b452302de5cc0d1798b87cc6cb20d7f6a89c7fdb53a069a18e80d0922d07de89
crc32: F19B448F
md5: 30eb08e834ee6865fa17db6b71187d7d
sha1: aa78eff7f812b91a9b789a68f47a1506de4d32f8
sha256: b452302de5cc0d1798b87cc6cb20d7f6a89c7fdb53a069a18e80d0922d07de89
sha512: 87c02f14b2aeb0072052c9004ed945cb808709c0fe02c0a573099d1554f625522f6a53e8259057822329c4755892ee2bb7b6a1a576073426df517666f378d397
ssdeep: 98304:sD3l4T091+G/xa3Z8+vGPdDN3Z4J22PhN:sD3l4T0Td/1++PdB3n2P
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T124B60153F746883FE0560A34192F677278B95E706ACA6483F7D05E0D3AF8AC26939317
sha3_384: 26df2569986d686181b3b666ad892f1d2bfa626842e9b1cec6c94c4388f94334de752f65f0b19128ae7272ae58bde7cb
ep_bytes: eb1066623a432b2b484f4f4b90e9ac30
timestamp: 2021-01-20 22:25:44

Version Info:

0: [No Data]

AdWare.Win32.VKDJ.dpnq also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
FireEyeGeneric.mg.30eb08e834ee6865
CylanceUnsafe
ZillyaAdware.VKDJ.Win32.2061
SangforTrojan.Win32.Save.a
K7AntiVirusAdware ( 005745361 )
AlibabaAdWare:Win32/VKontakteDJ.a0b60e53
K7GWAdware ( 005745361 )
CyrenW32/VKDJ.A.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/VKontakteDJ.J potentially unwanted
Paloaltogeneric.ml
Kasperskynot-a-virus:AdWare.Win32.VKDJ.dpnq
AvastWin32:Malware-gen
SophosGeneric PUA KK (PUA)
McAfee-GW-EditionBehavesLike.Win32.Generic.vc
SentinelOneStatic AI – Malicious PE
IkarusSuspectFile
AviraHEUR/AGEN.1206174
Antiy-AVLTrojan/Generic.ASMalwS.351E640
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataWin32.Trojan.Agent.626F45
CynetMalicious (score: 100)
AhnLab-V3Malware/Gen.RL_Reputation.R364980
McAfeeArtemis!30EB08E834EE
MalwarebytesPUP.Optional.VkontakteDJ
APEXMalicious
RisingPUF.VKontakteDJ!8.47E (TFE:5:ek0Kzc9dsVQ)
YandexPUA.VKDJ!fChkdpn7BL0
MaxSecureTrojan.Malware.300983.susgen
FortinetAdware/VKontakteDJ.J
AVGWin32:Malware-gen
CrowdStrikewin/grayware_confidence_100% (W)

How to remove AdWare.Win32.VKDJ.dpnq?

AdWare.Win32.VKDJ.dpnq removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment