Adware

About “Win32/Adware.AdAnti.E” infection

Malware Removal

The Win32/Adware.AdAnti.E is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Adware.AdAnti.E virus can do?

  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Authenticode signature is invalid

How to determine Win32/Adware.AdAnti.E?


File Info:

name: 13DD7331F575591D875F.mlw
path: /opt/CAPEv2/storage/binaries/314bb60eb246cbec3657b7b491466821d9d16e24a29471c6f9a32a352345cb71
crc32: 052F063F
md5: 13dd7331f575591d875f1eeab273d9b3
sha1: 23f1b15f8fe887f8564a592e6e2dae63b5dd268b
sha256: 314bb60eb246cbec3657b7b491466821d9d16e24a29471c6f9a32a352345cb71
sha512: c72e12df24c97d60eed83edbe4323b1e616303374874854869df5085705fc9211c00570827768f16acf9391301155c3ae09aba38df4b7a8190dddf0402453cd6
ssdeep: 393216:vUZZ9z5o1hKI2sQhDSx3hP36Ll0lkrlQQVGxFWKKItgm:vUBzwqsLxhySkrlrGxFR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F0F63373F7D84A16D0262D3CC06DB3568F600AE8B92F9652EC347D4DBA85B961F0B1B4
sha3_384: 5556776106e3ecd07a32b24738799f861a8c08a5fdf5bc38f530e8cdf7e31498f2f32ee0d728fb2e78c2a6b9e3140fe9
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2015-12-11 07:12:34

Version Info:

CompanyName:
FileDescription: FLiNGTrainer
FileVersion: 1.0.0.15063
LegalCopyright:
LegalTrademarks: FLiNGTrainer
ProductName: FLiNGTrainer
ProductVersion: 1.0.0.15063
Translation: 0x0804 0x04e4

Win32/Adware.AdAnti.E also known as:

Elasticmalicious (high confidence)
DrWebAdware.Siggen.33137
FireEyeTrojan.GenericKD.37280749
McAfeeArtemis!13DD7331F575
MalwarebytesPUP.Optional.ChinAd
SangforAdware.Win32.Agentb.gen
K7AntiVirusAdware ( 0057b1141 )
AlibabaAdWare:Win32/Agentb.92b0e2d7
K7GWAdware ( 0057b1141 )
CyrenW32/Trojan.XAAQ-5652
ESET-NOD32a variant of Win32/Adware.AdAnti.E
TrendMicro-HouseCallTROJ_GEN.R002H07D122
Paloaltogeneric.ml
Kasperskynot-a-virus:HEUR:AdWare.Win32.Agentb.gen
BitDefenderTrojan.GenericKD.37280749
AvastWin32:Adware-gen [Adw]
TencentWin32.Adware.Adanti.Dzar
EmsisoftTrojan.GenericKD.37280749 (B)
ZillyaAdware.Agent.Win32.171418
McAfee-GW-EditionBehavesLike.Win32.Dropper.wc
SophosGeneric PUA CD (PUA)
KingsoftWin32.Troj.Generic.yl.(kcloud)
MicrosoftTrojan:Win32/Sabsik.TE.B!ml
GDataTrojan.GenericKD.37280749
VBA32Adware.Agentb
ALYacTrojan.GenericKD.37280749
MAXmalware (ai score=89)
CylanceUnsafe
RisingAdware.SvcInst/NSIS!1.DDDD (CLASSIC)
YandexPUA.AdAnti!S28Pjmcmi/M
FortinetRiskware/AdAnti
AVGWin32:Adware-gen [Adw]
PandaTrj/CI.A

How to remove Win32/Adware.AdAnti.E?

Win32/Adware.AdAnti.E removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment