Dropped:Adware.Dm.A removal guide

The Dropped:Adware.Dm.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Dropped:Adware.Dm.A virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Network activity detected but not expressed in API logs

How to determine Dropped:Adware.Dm.A?


File Info:
crc32: 0DFF4617
md5: 1c5fb83b0aa1c143b6bf188bcec602d7
name: 36320_ddooo.exe
sha1: 628d6269b42e027df37e72478d437efc83906daa
sha256: c0b4a161b42b1c23f22a1923d3289c3e1848cc1d65a7e9f84a05aa1e00a2ef4c
sha512: 0f3f7b1c4b57e3dda2793ff47316d070508e7f5d2c136e2911991913338a712cd6b28553a15ed9995a55a9d7073f1bf93f61d2149e50161f7b00d8a9a755cd32
ssdeep: 393216:7erNCUKgFO/9C30kTQwzGFuy2dBTc968JowBAHuUAAHLJde:7w6N9CNjGFTQFcLawGHuLAFde
type: PE32 executable (GUI) Intel 80386, for MS Windows, InnoSetup self-extracting archive

Version Info:
InternalName: 
FileVersion:                     
CompanyName:                                                             
Comments: This installation was built with Inno Setup: http://www.innosetup.com
ProductName: 
ProductVersion: 
FileDescription: x7956x7801x4e2dx6587x7248 x5b89x88c5                                                    
OriginalFilename: 
Translation: 0x0409 0x04e4

Dropped:Adware.Dm.A also known as:

MicroWorld-eScan	Dropped:Adware.Dm.A
CAT-QuickHeal	Trojan.Agent
ALYac	Adware.Dm.A
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Trojan ( 000001021 )
BitDefender	Dropped:Adware.Dm.A
K7GW	Trojan ( 000001021 )
Cybereason	malicious.b0aa1c
Baidu	NSIS.Trojan-Downloader.QQHelper.a
F-Prot	W32/MalwareS.BHCZ
Symantec	SecurityRisk.gen1
GData	Adware.Dm.A
Kaspersky	Trojan.Win32.Dm.wyg
NANO-Antivirus	Riskware.Win32.WSearch.hfid
Rising	Trojan.DL.Agent.zfw (CLASSIC)
Sophos	Mal/Proxy-B
Comodo	Malware@#2p1qxcdcz96fd
F-Secure	Heuristic.HEUR/AGEN.1012168
DrWeb	Trojan.Starter.455
TrendMicro	TROJ_DELF.GBN
McAfee-GW-Edition	BehavesLike.Win32.BadFile.vc
FireEye	Dropped:Adware.Dm.A
Emsisoft	Dropped:Adware.Dm.A (B)
Ikarus	Trojan-Dropper.Agent
Cyren	W32/Adware.OPMD-5241
Avira	ADSPY/Cdnup.A.3
Antiy-AVL	Trojan/Win32.Dm
Arcabit	Adware.Dm.A
ZoneAlarm	Trojan.Win32.Dm.wyg
Microsoft	Program:Win32/Vigram.A
McAfee	Artemis!1C5FB83B0AA1
MAX	malware (ai score=83)
VBA32	BScope.Trojan.Genome
Cylance	Unsafe
ESET-NOD32	NSIS/TrojanDownloader.QQHelper.NAB.Gen
TrendMicro-HouseCall	TROJ_DELF.GBN
Tencent	Win32.Trojan.Dm.Dzkp
Yandex	Trojan.Dm!6LnsFUzANG8
Fortinet	W32/Dm.XL!tr
AVG	Win32:Adware-gen [Adw]
Panda	Generic Malware
Qihoo-360	Win32/Trojan.1c6

How to remove Dropped:Adware.Dm.A?

Dropped:Adware.Dm.A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X