What is “Adware:Win32/Qjwmonkey.dam#2”?

The Adware:Win32/Qjwmonkey.dam#2 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Adware:Win32/Qjwmonkey.dam#2 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Adware:Win32/Qjwmonkey.dam#2?


File Info:
name: 41D42AEF5455FAE33238.mlw
path: /opt/CAPEv2/storage/binaries/b87c2204eed8eae86762c8d82a263a469a5f78baa94553b1152dba1584fded3d
crc32: 65467798
md5: 41d42aef5455fae3323884f1eb277b56
sha1: ab1876ad89c10a2b6022be201019b13e7564dfe5
sha256: b87c2204eed8eae86762c8d82a263a469a5f78baa94553b1152dba1584fded3d
sha512: 3c80a339218a3a02e3b4def3d57ff98f87a244b9f580295ef02de477ebe6c4ecd3a8b01455f11f8077ee8ffb71d82a29b2a6afdbc7258dcd87858e5516dd2754
ssdeep: 12288:3vFzQPR0Y89gEZ0b0mhK+Vd6gP7AeE0V1DmI2jmpeHp/7BL:/CR0n9gECzp6gP7gIv2jmep/NL
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FDE44C15B601C232EEA240B1EABD6E6E505C9736035928D7F3C84E56ADB15E33B31B4F
sha3_384: ae39719e278c9f68ee1c0251c81a10bf5e94aff63ed77b77331ba8dda0871112409e034b251edf9080361e8e08e8f71e
ep_bytes: 
timestamp: 2019-12-26 07:17:31

Version Info:
0: [No Data]

Adware:Win32/Qjwmonkey.dam#2 also known as:

Bkav	W32.AIDetectMalware
Lionic	Riskware.Win32.Graftor.1!c
DrWeb	Adware.Qjwmonkey.169
Sangfor	Suspicious.Win32.Save.a
Cyren	W32/S-d5a72283!Eldorado
Symantec	Trojan.Gen.2
APEX	Malicious
McAfee-GW-Edition	GenericRXKO-KK!41D42AEF5455
Sophos	Generic Reputation PUA (PUA)
Ikarus	Trojan-Banker.Emotet
Antiy-AVL	GrayWare/Win32.Generic
Xcitium	Heur.Corrupt.PE@1z141z3
Microsoft	Adware:Win32/Qjwmonkey.dam#2
Google	Detected
McAfee	GenericRXKO-KK!41D42AEF5455
VBA32	Adware.Qjwmonkey
Malwarebytes	Adware.ChinAd
Rising	Trojan.Generic@AI.100 (RDMK:aB8G1eJRaa1/A5btXTe/dw)
MaxSecure	Trojan.Malware.74768221.susgen
Fortinet	W32/Graftor.6261!tr
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_60% (W)

How to remove Adware:Win32/Qjwmonkey.dam#2?

Adware:Win32/Qjwmonkey.dam#2 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X