Malware

About “AdWare.Win32.VKontakteDJ” infection

Malware Removal

The AdWare.Win32.VKontakteDJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What AdWare.Win32.VKontakteDJ virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Attempts to modify proxy settings

Related domains:

z.whorecord.xyz
dj-updates.com
upd.dj-updates.com
a.tomx.xyz

How to determine AdWare.Win32.VKontakteDJ?


File Info:

crc32: B4BD222C
md5: 93bda720c557582317e05f1805329d3f
name: 781247
sha1: 05d4eda89d98e886eb16087f4ed2b01ad2b8ed44
sha256: ed29a19b0b68ba15521ec5e4129aa4c428eb521c039af2750cb5f8803b71a6cd
sha512: 18078ec81bf8cb001f0d99b303c7376ac7e3fd6935782714b53aef218808acee21384ac212ebc3d52ec35655bcbe94eaa9757ab41a7cbe7e05b790917c82d5b5
ssdeep: 24576:CTfEWQMHi9jzdDnAHEBuqKYmw2IdyZ7V27Hw9FKHT3qH4GYEe0XmMZWwu8sXEJwm:McW4fLANMm07Rz6YTZREJw+lD9
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright:
FileVersion: 1.5.0.19
CompanyName: Vkontakte.DJ
Comments: This installation was built with Inno Setup.
ProductName: VkontakteDJ
ProductVersion: 3.002
FileDescription: VkontakteDJ Setup
OriginalFileName:
Translation: 0x0000 0x04b0

AdWare.Win32.VKontakteDJ also known as:

DrWebProgram.VKontakteDJ.73
CylanceUnsafe
K7AntiVirusRiskware ( 0040eff71 )
K7GWRiskware ( 0040eff71 )
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTROJ_GEN.R002H0CK319
AvastWin32:UnwantedSig [PUP]
Kasperskynot-a-virus:HEUR:AdWare.Win32.VKontakteDJ.gen
AlibabaAdWare:Win32/VKontakteDJ.ba2091f6
RisingPUF.MediaDrug!1.BEF6 (CLASSIC)
F-SecureHeuristic.HEUR/AGEN.1044792
McAfee-GW-EditionBehavesLike.Win32.PUPXAV.vc
SophosVKontakteDJ (PUA)
IkarusTrojan.Agent
CyrenW32/Trojan.RWFO-0507
WebrootW32.Malware.gen
AviraHEUR/AGEN.1044792
Antiy-AVLGrayWare/Win32.VKontakteDJ.a
ZoneAlarmnot-a-virus:HEUR:AdWare.Win32.VKontakteDJ.gen
MicrosoftPUA:Win32/MediaDrug
AhnLab-V3PUP/Win32.RL_Helper.R296521
McAfeeArtemis!93BDA720C557
TencentMalware.Win32.Gencirc.10b0fc8d
FortinetW32/VKontakteDJ.79!tr
AVGFileRepMalware [PUP]
Qihoo-360Win32/Virus.Adware.45e

How to remove AdWare.Win32.VKontakteDJ?

AdWare.Win32.VKontakteDJ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment