Adware

BScope.Adware.Qjwmonkey information

Malware Removal

The BScope.Adware.Qjwmonkey is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What BScope.Adware.Qjwmonkey virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Reads data out of its own binary image
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)

Related domains:

w.nanweng.cn

How to determine BScope.Adware.Qjwmonkey?


File Info:

crc32: 7B0FBB3C
md5: f0d27e866f3d9a28fa63a8ad517d6534
name: androidE58F8DE7BC96E8AF91E5B7A5E585B7apkdb2.1.320190518E5A49AE8AFADE8A880E5AE98E696B9E78988_E5AE89E5
sha1: 3ce086d9df81905246382fd22fe501312ca14790
sha256: 83d58864692968356eeb3834cf92c213f993bdd51e53118a22e3a0673aadbb0f
sha512: ed849a40a2bd55a1edb5c6101edfd55cbcfa565dfcf9e5e85e1539be79b1114cf63eb770857c8dd206ee28ef2f5fbef2f36e5c66617e52e87822561da2011d44
ssdeep: 24576:/CR0n9gECzp6gP7gIv2jmep/NYWqZyh3ClZrI+2eFhpd5NUYHu17nl:/lTCnnFepFSshsxEetd5ru17l
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2018
InternalName: x667ax80fdx4e0bx8f7dx5668.exe
FileVersion: 4.0.0.1226
ProductName: x667ax80fdx4e0bx8f7dx5668.exe
ProductVersion: 4.0.0.1226
FileDescription: x667ax80fdx4e0bx8f7dx5668
OriginalFilename: x667ax80fdx4e0bx8f7dx5668.exe
Translation: 0x0804 0x04b0

BScope.Adware.Qjwmonkey also known as:

DrWebAdware.Qjwmonkey.169
MicroWorld-eScanGen:Variant.Ulise.94664
FireEyeGeneric.mg.f0d27e866f3d9a28
CAT-QuickHealPUA.AdwareRI.S9952567
ALYacGen:Variant.Ulise.94664
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusAdware ( 005317961 )
BitDefenderGen:Variant.Ulise.94664
Cybereasonmalicious.66f3d9
TrendMicroTROJ_GEN.R002C0PA820
F-ProtW32/S-d5a72283!Eldorado
SymantecTrojan.Gen.MBT
APEXMalicious
AvastWin32:PUP-gen [PUP]
GDataGen:Variant.Ulise.94664
Kasperskynot-a-virus:HEUR:Downloader.Win32.Generic
AlibabaAdWare:Win32/Qjwmonkey.097cd260
NANO-AntivirusRiskware.Win32.Qjwmonkey.gueixk
AegisLabRiskware.Win32.Generic.1!c
TencentMalware.Win32.Gencirc.10b8a280
Endgamemalicious (high confidence)
SophosQjMonkey (PUA)
ComodoApplication.Win32.Qjwmonkey.HU@8hjovh
MaxSecureTrojan.Malware.121218.susgen
ZillyaAdware.Qjwmonkey.Win32.588
Invinceaheuristic
EmsisoftGen:Variant.Ulise.94664 (B)
IkarusPUA.Qjwmonkey
CyrenW32/Adware.RTHV-5185
JiangminDownloader.Agent.mlt
WebrootW32.Adware.Gen
AviraHEUR/AGEN.1042852
ArcabitTrojan.Ulise.D171C8
SUPERAntiSpywareAdware.Qjwmonkey/Variant
ZoneAlarmnot-a-virus:HEUR:Downloader.Win32.Generic
MicrosoftPUA:Win32/Qjwmonkey
AhnLab-V3PUP/Win32.RL_Qjwmonkey.R287544
VBA32BScope.Adware.Qjwmonkey
MAXmalware (ai score=100)
Ad-AwareGen:Variant.Ulise.94664
MalwarebytesAdware.ChinAd
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Adware.Qjwmonkey.H
TrendMicro-HouseCallTROJ_GEN.R002C0PA820
RisingAdware.Downloader!1.B5B0 (CLOUD)
SentinelOneDFI – Malicious PE
eGambitUnsafe.AI_Score_100%
FortinetW32/Qjwmonkey.KD!tr
AVGFileRepMalware

How to remove BScope.Adware.Qjwmonkey?

BScope.Adware.Qjwmonkey removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment