Adware

Generic.Adware.Campaignz.B.B43C5FB6 removal instruction

Malware Removal

The Generic.Adware.Campaignz.B.B43C5FB6 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Adware.Campaignz.B.B43C5FB6 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Performs HTTP requests potentially not found in PCAP.
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Attempts to modify proxy settings

How to determine Generic.Adware.Campaignz.B.B43C5FB6?


File Info:

name: 85AF58EB991F84A63E45.mlw
path: /opt/CAPEv2/storage/binaries/55aae1239f598ef27aa86d41cb4717b14f39b44a98a8f517b912d76dec4783a7
crc32: 0042FAEA
md5: 85af58eb991f84a63e4533fea22c4dbb
sha1: 9252b986c72aa92f47f9f99ebfea36b78a0d7f2a
sha256: 55aae1239f598ef27aa86d41cb4717b14f39b44a98a8f517b912d76dec4783a7
sha512: 7febe29ebfa04e28ef18648e0ec38a693e1defc33e13a28b1d8d71e19b39c292d32b1a39ce90a8cd3a7ff839af524a3c8836ba8ae57c5f313f32c84607c39b66
ssdeep: 24576:s7FUDowAyrTVE3U5F/K1lORfKic6QL3E2vVsjECUAQT45deRV9RB:sBuZrEUAqfKIy029s4C1eH9n
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EA85CF3FF268A13EC56A1B3245738320997BBA51B81A8C1E47FC384DCF765601E3B656
sha3_384: 1d6d86493cf8ca9e014a6525b4b8190e33184498cea84896c7f1aeaa2777d57f62f42a041c95372442107d3be8e59ba3
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2023-02-15 14:54:16

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName:
FileDescription: Femboy Burgers v033 By Asephy.exe Setup
FileVersion: 1.2.0.0
LegalCopyright: Femboy Burgers v033 By Asephy.exe
OriginalFileName:
ProductName: Femboy Burgers v033 By Asephy.exe
ProductVersion: 1.2
Translation: 0x0000 0x04b0

Generic.Adware.Campaignz.B.B43C5FB6 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.OffLoader.4!c
Elasticmalicious (high confidence)
FireEyeGeneric.Adware.Campaignz.B.B43C5FB6
ALYacGeneric.Adware.Campaignz.B.B43C5FB6
Cylanceunsafe
VIPREGeneric.Adware.Campaignz.B.B43C5FB6
SangforDownloader.Win32.Offloader.V2yl
K7AntiVirusTrojan-Downloader ( 005a40d51 )
AlibabaTrojanDownloader:Win32/OffLoader.c6d657e7
K7GWTrojan-Downloader ( 005a40d51 )
CrowdStrikewin/malicious_confidence_100% (W)
CyrenW32/OffLoader.A.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win32/TrojanDownloader.Agent.GVR
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-Downloader.Win32.OffLoader.gen
BitDefenderGeneric.Adware.Campaignz.B.B43C5FB6
MicroWorld-eScanGeneric.Adware.Campaignz.B.B43C5FB6
AvastFileRepMalware [Drp]
TencentWin32.Trojan-Downloader.Oader.Vwhl
SophosMal/Generic-S
F-SecureHeuristic.HEUR/AGEN.1332545
DrWebTrojan.PWS.Stealer.30446
TrendMicroTROJ_GEN.R002C0DGR23
McAfee-GW-EditionBehavesLike.Win32.Downloader.tc
EmsisoftGeneric.Adware.Campaignz.B.B43C5FB6 (B)
IkarusTrojan-Downloader.Win32.Agent
GDataGeneric.Adware.Campaignz.B.B43C5FB6
AviraHEUR/AGEN.1332545
ArcabitGeneric.Adware.Campaignz.B.B43C5FB6
ZoneAlarmHEUR:Trojan-Downloader.Win32.OffLoader.gen
MicrosoftTrojan:Win32/OffLoader.DAT!MTB
GoogleDetected
AhnLab-V3Trojan/Win.OffLoader.R594105
McAfeeArtemis!85AF58EB991F
MAXmalware (ai score=89)
MalwarebytesGeneric.Malware/Suspicious
PandaTrj/Chgt.AD
TrendMicro-HouseCallTROJ_GEN.R002C0DGR23
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Agent.GVR!tr
AVGFileRepMalware [Drp]
DeepInstinctMALICIOUS

How to remove Generic.Adware.Campaignz.B.B43C5FB6?

Generic.Adware.Campaignz.B.B43C5FB6 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment