Adware

What is “Generic.Adware.Campaignz.B.0E874129”?

Malware Removal

The Generic.Adware.Campaignz.B.0E874129 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Adware.Campaignz.B.0E874129 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Performs HTTP requests potentially not found in PCAP.
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Attempts to modify proxy settings
  • Deletes executed files from disk

How to determine Generic.Adware.Campaignz.B.0E874129?


File Info:

name: 92B8C95F1C83D97482F5.mlw
path: /opt/CAPEv2/storage/binaries/15755a9b07c52782e2361ff3cb944e34d030ad315d50f71b20d631ed8e748bc5
crc32: C3E5520F
md5: 92b8c95f1c83d97482f5615a883d5b52
sha1: 4ea9ac8f89f770de8800d7fc4a946606963cffc9
sha256: 15755a9b07c52782e2361ff3cb944e34d030ad315d50f71b20d631ed8e748bc5
sha512: cedc615677639ed4e739546342f53de7d8b15e507bd9ccfb96107af142c9a64b23bd53df20e37d6d073426113c925eafb62a418baa0385614f133a8d7c3ce761
ssdeep: 24576:s7FUDowAyrTVE3U5F/xpqKn5Wc+Kic6QL3E2vVsjECUAQT45deRV9Rd:sBuZrEUn5AKIy029s4C1eH9H
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E185CF3FF268A13EC5AA1B3245B39310997BBA51B81A8C1E07FC344DCF765601E3B656
sha3_384: 69bcfc4db7136721b96087402fb711d563e7f087443bfaf1ec0e7f032ebb15e0bb4469701dd39300c98154f9441a9481
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2023-02-15 14:54:16

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName:
FileDescription: rusifikator-dlya-macro-recorder.exe Setup
FileVersion: 5.0.0.0
LegalCopyright: rusifikator-dlya-macro-recorder.exe
OriginalFileName:
ProductName: rusifikator-dlya-macro-recorder.exe
ProductVersion: 5.0
Translation: 0x0000 0x04b0

Generic.Adware.Campaignz.B.0E874129 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Stealer.30446
MicroWorld-eScanGeneric.Adware.Campaignz.B.0E874129
FireEyeGeneric.Adware.Campaignz.B.0E874129
ArcabitGeneric.Adware.Campaignz.B.0E874129
CyrenW32/OffLoader.A.gen!Eldorado
ESET-NOD32a variant of Win32/TrojanDownloader.Agent.GVR
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-Downloader.Win32.OffLoader.gen
BitDefenderGeneric.Adware.Campaignz.B.0E874129
EmsisoftGeneric.Adware.Campaignz.B.0E874129 (B)
VIPREGeneric.Adware.Campaignz.B.0E874129
McAfee-GW-EditionBehavesLike.Win32.Trojan.tc
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ZoneAlarmHEUR:Trojan-Downloader.Win32.OffLoader.gen
GDataGeneric.Adware.Campaignz.B.0E874129
GoogleDetected
ALYacGeneric.Adware.Campaignz.B.0E874129
MAXmalware (ai score=88)
MaxSecureTrojan.Malware.300983.susgen

How to remove Generic.Adware.Campaignz.B.0E874129?

Generic.Adware.Campaignz.B.0E874129 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment