Adware

About “Generic.Adware.Campaignz.A.4ABADE08” infection

Malware Removal

The Generic.Adware.Campaignz.A.4ABADE08 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Adware.Campaignz.A.4ABADE08 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Generic.Adware.Campaignz.A.4ABADE08?


File Info:

name: F53665C004E5A3BBA95E.mlw
path: /opt/CAPEv2/storage/binaries/28cc0579fb0befb8fc0ffd9cd2c429364156a2d294db2fa24ff730d1060a6f7d
crc32: 8A09B596
md5: f53665c004e5a3bba95e189facff57c5
sha1: b02d805f1d94eee97a810c61cae6122551861014
sha256: 28cc0579fb0befb8fc0ffd9cd2c429364156a2d294db2fa24ff730d1060a6f7d
sha512: dd1428d92bc2086a28ea896650ff27406c6c7e5a951da6cd598e3822b2e070331a38c07a77fb15ec8d339caa0a89d83f7972e7bd9d11c7fcd2103a0d3da92a09
ssdeep: 24576:s7FUDowAyrTVE3U5F/PkKic6QL3E2vVsjECUAQT45deRV9R8:sBuZrEUAKIy029s4C1eH92
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17475BF3FF268A13EC56A1B3245B38320997BBA51B81A8C1E47FC344DCF765601E3B656
sha3_384: 37b55325664fd6e7d081e37d46712151bad4a1791dd80f0e4abf17490986ab1ef6480ee27c1e1dc5723e9f3b529e3127
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2023-02-15 14:54:16

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName:
FileDescription: DiskGenius 5501488 Professional Edition Portable RePack by
FileVersion:
LegalCopyright:
OriginalFileName:
ProductName: DiskGenius 5501488 Professional Edition Portable RePack by
ProductVersion: 9.12
Translation: 0x0000 0x04b0

Generic.Adware.Campaignz.A.4ABADE08 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.OffLoader.4!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoad4.15882
MicroWorld-eScanGeneric.Adware.Campaignz.A.4ABADE08
FireEyeGeneric.Adware.Campaignz.A.4ABADE08
McAfeeTrojan-FVPO!F53665C004E5
Cylanceunsafe
SangforAdware.Win32.Offloader.Vkp9
K7AntiVirusTrojan-Downloader ( 005a54591 )
AlibabaTrojanDownloader:Win32/OffLoader.5d585ac4
K7GWTrojan-Downloader ( 005a54591 )
CyrenW32/Agent.GDD.gen!Eldorado
SymantecPUA.Gen.2
ESET-NOD32a variant of Win32/TrojanDownloader.Agent.GWO
CynetMalicious (score: 100)
KasperskyTrojan-Downloader.Win32.OffLoader.nge
BitDefenderGeneric.Adware.Campaignz.A.4ABADE08
AvastWin32:Malware-gen
TencentMalware.Win32.Gencirc.13ecba97
EmsisoftGeneric.Adware.Campaignz.A.4ABADE08 (B)
F-SecureTrojan.TR/Downloader.Gen
VIPREGeneric.Adware.Campaignz.A.4ABADE08
TrendMicroTROJ_GEN.R002C0PHT23
McAfee-GW-EditionBehavesLike.Win32.Trojan.tc
SophosMal/Generic-S
IkarusTrojan-Downloader.Win32.Agent
GDataGeneric.Adware.Campaignz.A.4ABADE08
AviraTR/Downloader.Gen
ArcabitGeneric.Adware.Campaignz.A.4ABADE08
ZoneAlarmTrojan-Downloader.Win32.OffLoader.nge
MicrosoftTrojan:Win32/OffLoader.ASH!MTB
GoogleDetected
ALYacGeneric.Adware.Campaignz.A.4ABADE08
MAXmalware (ai score=87)
MalwarebytesGeneric.Malware/Suspicious
TrendMicro-HouseCallTROJ_GEN.R002C0PHT23
MaxSecureTrojan.Malware.300983.susgen
FortinetRiskware/Agent
AVGWin32:Malware-gen
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Generic.Adware.Campaignz.A.4ABADE08?

Generic.Adware.Campaignz.A.4ABADE08 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment