AdwareAdvertising.Kuaiba malicious file

The AdwareAdvertising.Kuaiba is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What AdwareAdvertising.Kuaiba virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Unconventionial binary language: Chinese (Simplified)
Authenticode signature is invalid

How to determine AdwareAdvertising.Kuaiba?


File Info:
name: 56186B90F13C97CB8BB8.mlw
path: /opt/CAPEv2/storage/binaries/a35147a054c7b6e1c450a6dd2eab5d32cd7c1665c7e37afb2b7d8916a35a16c1
crc32: 30E53176
md5: 56186b90f13c97cb8bb8d35c1e1f0607
sha1: 2be9b53f02f8f9d503596d5d7a99afdb5c4d7ef3
sha256: a35147a054c7b6e1c450a6dd2eab5d32cd7c1665c7e37afb2b7d8916a35a16c1
sha512: 89d4c97f8716d9cc40d8cac9b65026daeddc3879773179d8997343023d8c3df0f98158e91a9ced1746d59809f98b249972f452069e1bb0d878089767a02afba8
ssdeep: 12288:+OtCionimOZpabtfwwe8ZPpRSrABQC13rB3S:+Ot3oim6OSwe8tZr13r9S
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T144054B22BB5EC172CD8DA2BE9499667E0279F4434F3416D3A1E9BB0B4D71BDC1933281
sha3_384: a16c60d82ce94533afdfaa2f07caa94d95a50e9b94a04fcc259729244e022eed21b9b697de0d4076c211824561b01aff
ep_bytes: 837c2408017505e845050000ff742404
timestamp: 2021-02-04 11:12:59

Version Info:
Comments: www.kuai8.com
CompanyName: 凡游网络
FileDescription: 快吧游戏下载库模块
FileVersion: 9.5.1.8275
InternalName: K8DLUtils
LegalCopyright: 版权所有(c) 2013 凡游网络
OriginalFilename: K8DLUtils.dll
ProductName: 快吧游戏
ProductVersion: 9.5
Translation: 0x0804 0x04b0

AdwareAdvertising.Kuaiba also known as:

Bkav	W32.Common.CCDB633F
Elastic	malicious (high confidence)
Skyhigh	BehavesLike.Win32.BadFile.ch
McAfee	Artemis!56186B90F13C
Cylance	unsafe
Symantec	ML.Attribute.HighConfidence
Avast	Win32:AdwareX-gen [Adw]
Google	Detected
Microsoft	PUAAdvertising:Win32/Kuaiba
VBA32	AdwareAdvertising.Kuaiba
Malwarebytes	Adware.Kuaiba
Ikarus	Trojan.Win32.Generic
Fortinet	Riskware/Application
AVG	Win32:AdwareX-gen [Adw]
DeepInstinct	MALICIOUS

How to remove AdwareAdvertising.Kuaiba?

AdwareAdvertising.Kuaiba removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X