Categories: Adware

How to remove “Win32/Adware.Agent.NPP”?

The Win32/Adware.Agent.NPP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Adware.Agent.NPP virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32/Adware.Agent.NPP?


File Info:
name: 838CC5C026480397DE0B.mlwpath: /opt/CAPEv2/storage/binaries/8b0adaaac984d45fb394775ce5f6e3f27b2624a642764c5d5a80d180c88c95e6crc32: 91C25FC7md5: 838cc5c026480397de0bacd7ec2a363dsha1: a5ef5f1b82e5ca3bb041dacdab70f5c4a251f0e0sha256: 8b0adaaac984d45fb394775ce5f6e3f27b2624a642764c5d5a80d180c88c95e6sha512: 03f7658aedaba11359a15017f5a315bc24ebf411ebf018ed5d45f764fcafb3efa123c35ecf05827b082a38d4cb6bd45637cf0445e6ad3f8f20e5d9207c72a95fssdeep: 49152:fpBMBT6WEO2MFV6svprw+bNmWvoJ4uL+CnoadzLmmRXKXGdXcfhs:fpWBTSCV50+bZQJ4uL+ZaLvXestype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T137D533BEBE109F6DD8E94A3017FA122AB8AED5C05257100F1B7A637732758D3A44CC9Dsha3_384: 5d2379487258400e56b31e5c0373eeec6a1008787998053980b02a2fdaa4f5b94bbab07d047c0150fa83130501276c61ep_bytes: 81ec8001000053555633db57895c2418timestamp: 2009-04-30 14:07:33
Version Info:
CompanyName: www.paopaoche.netFileDescription: 皇家战争中文版FileVersion: 中文版LegalCopyright: Copyright paopaoche.Net 2014 All Rights ReservedProductName: 皇家战争中文版ProductVersion: 中文版Translation: 0x0804 0x03a8

Win32/Adware.Agent.NPP also known as:

Bkav	W32.AIDetectMalware
Lionic	Riskware.Win32.Generic.1!c
DrWeb	Trojan.PWS.Banker1.25346
McAfee	Artemis!838CC5C02648
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Adware.Win32.Agent.Vh1h
Alibaba	AdWare:Win32/Generic.c4792553
CrowdStrike	win/grayware_confidence_90% (W)
Cyren	W32/Trojan.FVHH-7793
Elastic	malicious (high confidence)
ESET-NOD32	Win32/Adware.Agent.NPP
ClamAV	Win.Downloader.84425-1
NANO-Antivirus	Trojan.Win32.Mlw.efvjiu
Rising	Adware.StartPage!1.DC11 (CLOUD)
McAfee-GW-Edition	BehavesLike.Win32.Dropper.vc
Sophos	Generic Reputation PUA (PUA)
Google	Detected
Antiy-AVL	GrayWare/Win32.Paopaoche
Xcitium	Application.Win32.MeinV.AK@57p4lw
Microsoft	PUA:Win32/Paopaoche
Cynet	Malicious (score: 100)
VBA32	TrojanDropper.Agent
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R023H06GB23
Fortinet	Adware/Agent
DeepInstinct	MALICIOUS