Categories: Adware

How to remove “Bang5mai.Adware.Advertising.DDS”?

The Bang5mai.Adware.Advertising.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bang5mai.Adware.Advertising.DDS virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family

How to determine Bang5mai.Adware.Advertising.DDS?


File Info:
name: FBAF94769B21D64969D5.mlwpath: /opt/CAPEv2/storage/binaries/cbf29ab8b9a5ec605e8727f0d8b43263c428c812e1ab4393b90ade90b5441823crc32: 7129B7BEmd5: fbaf94769b21d64969d58942c8f6fdffsha1: 65c56cd8b6d104bb763b09e3e3e6484f23d6e15bsha256: cbf29ab8b9a5ec605e8727f0d8b43263c428c812e1ab4393b90ade90b5441823sha512: 4751ac5d798342abc08152c0902282c011bf1789cec9de2682a42f474950c6ff82ad2ef879fa97cb0ed957081dd3bc1efee629343d34554881b718fc2388169dssdeep: 24576:AmwF4/dic/uBdMp1uDu3JN+8DvRnsjwWDBlbeQ+EjJaUbf1+jTyYfi:04/9+dMRjpU3YUbf1+jTZfitype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T1863518303606C43AD99291F0692DD70F902CBDA94BAA5CD3F3C91F6E28B15D35736E1Asha3_384: 0b160fe87032779fcba6d9778a4f2c4d973cf3c1b2893a9d65bcd75109180cf9123ff99ff2eedaca0b6abb67ed0c51b0ep_bytes: e8186e0000e97bfeffff558bec568b75timestamp: 2017-09-25 07:44:46
Version Info:
CompanyName: vipkdy.comFileDescription: VIP看电影web组件FileVersion: 1.0.0.16InternalName: VIPAdaptorChrm.exeLegalCopyright: Huai'an Xiancheng Information Technology Co., Ltd.OriginalFilename: VIPAdaptorChrm.exeProductName: VIP看电影web组件ProductVersion: 1.0.0.16Translation: 0x0804 0x04b0

Bang5mai.Adware.Advertising.DDS also known as:

Lionic	Adware.Win32.Bang5mai.2!c
FireEye	Generic.mg.fbaf94769b21d649
Skyhigh	Artemis!PUP
McAfee	GenericRXAA-AA!FBAF94769B21
Cylance	unsafe
Zillya	Adware.Bang5mai.Win32.661
Sangfor	Adware.Win32.Bang5mai.V0rd
K7AntiVirus	Adware ( 005279851 )
Alibaba	AdWare:Win32/BScope.d14611b7
K7GW	Adware ( 005279851 )
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Adware.Bang5mai.AM
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
Kaspersky	not-a-virus:AdWare.Win32.Bang5mai.ut
F-Secure	Heuristic.HEUR/AGEN.1370936
Sophos	Generic Reputation PUA (PUA)
SentinelOne	Static AI – Suspicious PE
Avira	HEUR/AGEN.1370936
Antiy-AVL	GrayWare[AdWare]/Win32.Bang5mai
ZoneAlarm	not-a-virus:AdWare.Win32.Bang5mai.ut
Microsoft	PUA:Win32/Yantai
Google	Detected
VBA32	BScope.Trojan.Crossrider
Malwarebytes	Bang5mai.Adware.Advertising.DDS
TrendMicro-HouseCall	TROJ_GEN.R002H0CLU23
Rising	PUA.YongyuFeed!8.F635 (RDMK:cmRtazog1ty6sumrO83jnNeQlay7)
Ikarus	PUA.Bang5mai
MaxSecure	Trojan.Malware.230374812.susgen
Fortinet	Riskware/Bang5mai
AVG	Win32:Adware-gen [Adw]
DeepInstinct	MALICIOUS
CrowdStrike	win/grayware_confidence_100% (W)