Categories: Adware

MSIL/Adware.CsdiMonetize.AW malicious file

The MSIL/Adware.CsdiMonetize.AW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Adware.CsdiMonetize.AW virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Creates RWX memory
Guard pages use detected – possible anti-debugging.
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
.NET file is packed/obfuscated with Confuser
Authenticode signature is invalid

How to determine MSIL/Adware.CsdiMonetize.AW?


File Info:
name: 6A2B308A05F050E24C15.mlwpath: /opt/CAPEv2/storage/binaries/31d56250ec414f53f974ff0ac760df3448fd701fa7b0f2f7690b8b1b92d15ba7crc32: A221336Amd5: 6a2b308a05f050e24c15b80cf1b86a43sha1: 375258d989b34704dbb7eebd540188c5990e219csha256: 31d56250ec414f53f974ff0ac760df3448fd701fa7b0f2f7690b8b1b92d15ba7sha512: 739768e3aaa3aa6f989d58b97e3d33903f7fdc1e854ca9f950f509171ddb161f2170189f23d5b6a0f48f5a7a13298b6f3ed61fa0919bccdcb048c78cac656c54ssdeep: 3072:k7f28sU/24luAJmWZjDyrAVrcckWqtdFxS9osF:+KU/24luAJmWZjD2AVockWqtdbMdtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T15A343F9C751071DEC85BC4739A986CA4EA602C7B570F7203A01736ADAA2C997CF251FFsha3_384: 3520cb9a84110712b3d96d7a6b0d0570ae317aa02d03b4345db0d7f29d74c48ebfb409b54ca8add049183b981057619eep_bytes: ff250020400000000000000000000000timestamp: 2019-03-11 14:43:21
Version Info:
Translation: 0x0000 0x04b0Comments: CompanyName: FileDescription: FileVersion: 1.4.0.0InternalName: aaaaaaaaB.exeLegalCopyright: LegalTrademarks: OriginalFilename: aaaaaaaaB.exeProductName: ProductVersion: 1.4.0.0Assembly Version: 9.5.1.2

MSIL/Adware.CsdiMonetize.AW also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.MSIL.Basic.9.Gen
FireEye	Generic.mg.6a2b308a05f050e2
McAfee	Artemis!6A2B308A05F0
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 0053600a1 )
Alibaba	AdWare:MSIL/Monetize.05ae12c3
K7GW	Trojan ( 0053600a1 )
Cybereason	malicious.a05f05
BitDefenderTheta	Gen:NN.ZemsilF.34062.om0@a4aS30k
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Adware.CsdiMonetize.AW
TrendMicro-HouseCall	TROJ_GEN.R002C0OL221
Paloalto	generic.ml
ClamAV	Win.Malware.Csdimonetize-6847537-0
Kaspersky	not-a-virus:HEUR:AdWare.MSIL.Monetize.gen
BitDefender	Trojan.MSIL.Basic.9.Gen
SUPERAntiSpyware	Trojan.Agent/Gen-Dropper
Avast	Win32:Adware-gen [Adw]
Tencent	Msil.Adware.Csdimonetize.Wogh
Ad-Aware	Trojan.MSIL.Basic.9.Gen
Emsisoft	Trojan.MSIL.Basic.9.Gen (B)
Comodo	ApplicUnwnt@#y055nyexkc9k
Zillya	Adware.CsdiMonetize.Win32.2708
TrendMicro	TROJ_GEN.R002C0OL221
McAfee-GW-Edition	BehavesLike.Win32.PWSZbot.dm
Sophos	Generic PUA DH (PUA)
Ikarus	AdWare.MSIL.Csdimonetize
GData	Trojan.MSIL.Basic.9.Gen
Jiangmin	AdWare.MSIL.npot
Webroot	W32.Adware.Gen
Avira	HEUR/AGEN.1142756
ViRobot	Adware.Csdimonetize.230912
Microsoft	Backdoor:Win32/Aicat.A!ml
Cynet	Malicious (score: 99)
ALYac	Trojan.MSIL.Basic.9.Gen
Malwarebytes	Adware.Csdimonetize
APEX	Malicious
Yandex	PUA.CsdiMonetize!VgqqrSSLDAE
SentinelOne	Static AI – Malicious PE
Fortinet	MSIL/Agent.EKS!tr
AVG	Win32:Adware-gen [Adw]
Panda	Trj/GdSda.A