Adware

About “BScope.Adware.KuwanBar” infection

Malware Removal

The BScope.Adware.KuwanBar is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What BScope.Adware.KuwanBar virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine BScope.Adware.KuwanBar?


File Info:

name: BEF517EFF79526ECC73C.mlw
path: /opt/CAPEv2/storage/binaries/3245ea059b110f41336abbeaa663f41816f5d901ce378ba3443e0582b9c6de49
crc32: 6D6B10CB
md5: bef517eff79526ecc73cc30e3b823fc7
sha1: 6bac2ab0ed8710779b26d98644001b53fb6f3102
sha256: 3245ea059b110f41336abbeaa663f41816f5d901ce378ba3443e0582b9c6de49
sha512: fd304f7356caed82d7565c193571d8e1878a6389846a2e66b4ef3181053bcbea16ee45f9176ef902a48120588c041880cfd0142f97cfd701de2c33dee8316a01
ssdeep: 49152:U4GMayN5p6mNOkN1CN/XSNhnP00vkSrUAkRKifkiJuudWQm:XGMayN5pv0kNzNhnP00vhrUAkUifki
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1D8A58C21BDF14577C16307326EDEF63D71BEA6301B2981DB63C80F187D602A25629A7B
sha3_384: 6fe0eb0ec38dbf894870d6f846ab74d60167340fbd300143a48012cc118d919a4c96679802b2eb3cc5d585e481a44771
ep_bytes: e86e0a0000e987feffff558bec6a00ff
timestamp: 2021-09-22 06:07:45

Version Info:

0: [No Data]

BScope.Adware.KuwanBar also known as:

LionicRiskware.Win32.Convagent.1!c
CylanceUnsafe
SangforPUP.Win32.Convagent.gen
AlibabaAdWare:Win32/YouXun.102d
CyrenW32/Trojan.RLEL-0208
SymantecML.Attribute.HighConfidence
Paloaltogeneric.ml
Kasperskynot-a-virus:HEUR:Downloader.Win32.Convagent.gen
RisingAdware.Agent!1.CCB4 (CLOUD)
SophosGeneric PUA GL (PUA)
McAfee-GW-EditionBehavesLike.Win32.Dropper.vh
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.Generic.gycwq
ViRobotAdware.Win.2199552
AhnLab-V3PUP/Win.Generic.C4530066
McAfeeGenericRXQY-TE!BEF517EFF795
VBA32BScope.Adware.KuwanBar
MalwarebytesPUP.Optional.ChinAd
TrendMicro-HouseCallTROJ_GEN.R002H07L421
TencentPua:AdWare.Win32.Burden.16000055
MaxSecureTrojan.Malware.109826924.susgen
FortinetPossibleThreat.MU

How to remove BScope.Adware.KuwanBar?

BScope.Adware.KuwanBar removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment