Should I remove “Bang5mai.Adware.Advertising.DDS”?

The Bang5mai.Adware.Advertising.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bang5mai.Adware.Advertising.DDS virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Bang5mai.Adware.Advertising.DDS?


File Info:
name: 05B6A021B1DAFDE757AB.mlw
path: /opt/CAPEv2/storage/binaries/bad005f6053cd6e66cd6be76cd9364bc4628c01637f2006cc938e6726a837e5e
crc32: CF1107FA
md5: 05b6a021b1dafde757abe0023bedbb20
sha1: 4098430207e9da8919148a90f917244625d854e9
sha256: bad005f6053cd6e66cd6be76cd9364bc4628c01637f2006cc938e6726a837e5e
sha512: adc6697a458d5979e5821b3f9650b4ce3f4a381bde4cbce2aa8245b163b359c651c1273bf2fda245c6cf947f8efaa813783423fe722bca74920f587323953740
ssdeep: 24576:nmfFVqsgkSCSPyhcGwplqBeqCA8rGN9m2Ik+ZsATKclC7qp7eiWSuG:nEJSCSp+TXILsATdE7qp7efSuG
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T11D354B203A1AC436D6AE41F1A92DA75B503C7E654BF498C3F3C46F6E68305C25B36B27
sha3_384: 7c32dbc5b9a0be7846cc12df2d0592a42992a61b8dd16c0e575c4b0c6978a9d342b704c130ccb229aa5ea30aad3ac418
ep_bytes: 558bec837d0c017505e8c99f0000ff75
timestamp: 2018-12-06 08:43:20

Version Info:
CompanyName: youjiangj.com
FileDescription: 右键管家卸载支持模块
FileVersion: 11.0.0.3
InternalName: support.dll
LegalCopyright: Copyright(@) 2010-2018 youjiangj.com All Rights Reserved.
OriginalFilename: support.dll
ProductName: 右键管家卸载支持模块
ProductVersion: 11.0.0.3
Translation: 0x0409 0x04b0

Bang5mai.Adware.Advertising.DDS also known as:

Bkav	W32.Common.F6C8897B
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Variant.Jaik.78193
FireEye	Gen:Variant.Jaik.78193
Skyhigh	Artemis
McAfee	Artemis!05B6A021B1DA
Malwarebytes	Bang5mai.Adware.Advertising.DDS
Zillya	Adware.Bang5mai.Win32.610
CrowdStrike	win/grayware_confidence_100% (W)
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Adware.Bang5mai.AW
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Jaik.78193
Avast	Win32:Malware-gen
VIPRE	Gen:Variant.Jaik.78193
Emsisoft	Gen:Variant.Jaik.78193 (B)
GData	Gen:Variant.Jaik.78193
Varist	W32/ABApplication.KOMY-8777
MAX	malware (ai score=85)
Arcabit	Trojan.Jaik.D13171
Google	Detected
ALYac	Gen:Variant.Jaik.78193
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H0CB724
MaxSecure	Trojan.Malware.107292999.susgen
Fortinet	Riskware/Bang5mai
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Bang5mai.Adware.Advertising.DDS?

Bang5mai.Adware.Advertising.DDS removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X