Adware

Generic.Adware.Campaignz.B.4975D310 information

Malware Removal

The Generic.Adware.Campaignz.B.4975D310 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Adware.Campaignz.B.4975D310 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Performs HTTP requests potentially not found in PCAP.
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Attempts to modify proxy settings
  • Deletes executed files from disk

How to determine Generic.Adware.Campaignz.B.4975D310?


File Info:

name: 6A2D6FDD5BB74947AD78.mlw
path: /opt/CAPEv2/storage/binaries/2dd0e133c8980f4e13fac3d026b31f0ad4317f00b6b2ee6e6d73a8b9b912f995
crc32: 45007D74
md5: 6a2d6fdd5bb74947ad7854f23c3e072b
sha1: ad83ca819cd613353c79ce7b6bf5135f6eb5d13e
sha256: 2dd0e133c8980f4e13fac3d026b31f0ad4317f00b6b2ee6e6d73a8b9b912f995
sha512: baf45bfe8ced4a809f5f2307a0b516af0d1b9331ccfe9809474119374d2155c38c5212a2f96aa9029c42331c3408f028872b1908a6faf55e5d8065207c859214
ssdeep: 24576:s7FUDowAyrTVE3U5F/MpqKnAcKic6QL3E2vVsjECUAQT45deRV9Re:sBuZrEUm5DKIy029s4C1eH9M
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17585CF3FF268A13EC5AA1B3245739310997BBA61B81A8C1E07FC344DCF765601E3B656
sha3_384: 6744eda0a3c2e508007fda1aaa1a291f29a61d49444f2b1704565416f3ce27bc1663bf40c80bea7e871e926891b3e81e
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2023-02-15 14:54:16

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName:
FileDescription: Adobe Premiere Pro 2023 v23.5.0.56 (x64) Pre-Cracked Setup
FileVersion: 5.0.0.0
LegalCopyright: Adobe Premiere Pro 2023 v23.5.0.56 (x64) Pre-Cracked
OriginalFileName:
ProductName: Adobe Premiere Pro 2023 v23.5.0.56 (x64) Pre-Cracked
ProductVersion: 5.0
Translation: 0x0000 0x04b0

Generic.Adware.Campaignz.B.4975D310 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Stealer.30446
MicroWorld-eScanGeneric.Adware.Campaignz.B.4975D310
FireEyeGeneric.Adware.Campaignz.B.4975D310
ALYacGeneric.Adware.Campaignz.B.4975D310
MalwarebytesAdware.Bundler.Generic
VIPREGeneric.Adware.Campaignz.B.4975D310
CyrenW32/OffLoader.A.gen!Eldorado
ESET-NOD32a variant of Win32/TrojanDownloader.Agent.GSQ
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-Downloader.Win32.OffLoader.gen
BitDefenderGeneric.Adware.Campaignz.B.4975D310
AvastFileRepMalware [Misc]
EmsisoftGeneric.Adware.Campaignz.B.4975D310 (B)
F-SecureTrojan.TR/Dldr.Agent.vxqjm
McAfee-GW-EditionBehavesLike.Win32.Trojan.tc
GDataGeneric.Adware.Campaignz.B.4975D310
AviraTR/Dldr.Agent.vxqjm
MAXmalware (ai score=81)
ArcabitGeneric.Adware.Campaignz.B.4975D310
ZoneAlarmHEUR:Trojan-Downloader.Win32.OffLoader.gen
MicrosoftTrojan:Script/Phonzy.B!ml
GoogleDetected
McAfeeArtemis!6A2D6FDD5BB7
IkarusTrojan-Downloader.Win32.Agent
MaxSecureTrojan.Malware.300983.susgen
FortinetRiskware/Agent
AVGFileRepMalware [Misc]

How to remove Generic.Adware.Campaignz.B.4975D310?

Generic.Adware.Campaignz.B.4975D310 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment