Win32/Adware.Bang5mai.A removal

The Win32/Adware.Bang5mai.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Adware.Bang5mai.A virus can do?

Attempts to connect to a dead IP:Port (2 unique times)
Presents an Authenticode digital signature
Reads data out of its own binary image
Performs some HTTP requests
Unconventionial language used in binary resources: Chinese (Simplified)
Anomalous binary characteristics

Related domains:

p.b5m.com

hao.b5m.com

How to determine Win32/Adware.Bang5mai.A?


File Info:
crc32: 2E1C694C
md5: f6018e4851370ebdfe7ed83ca72f2d31
name: F6018E4851370EBDFE7ED83CA72F2D31.mlw
sha1: 88da4ad5e6af9ee40d782720c092e371635e7d0d
sha256: 5c2efee7d3fb21fadd1f999b9d047dd33ed51d9ef53106a98d78c96a4f4bc8b7
sha512: f5904edcba202c9fe7536697ba184dae7d8d1d5ccbab83a4d5955871081a33c67659865e3cde8903e105d70641e4462778dc76ac85bbc41777da57cddc3a58df
ssdeep: 12288:PdqfgZEfglMvblvTuF7Bgnx8AHXUSXBpfiA9iHYgo58svDN4Q:PdqfgZEMMts7B0xvHZbfiA9iH2isvDN
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2013 B5MSoft
InternalName: UninstallApp
FileVersion: 4.0.8.0
CompanyName: B5MSoft
ProductName: UninstallApp
ProductVersion: 4.0.8.0
FileDescription: UninstallApp Module
OriginalFilename: UninstallApp.exe
Translation: 0x0409 0x04b0

Win32/Adware.Bang5mai.A also known as:

K7AntiVirus	Adware ( 004e189e1 )
Elastic	malicious (high confidence)
Cylance	Unsafe
Zillya	Adware.Bang5mai.Win32.653
Sangfor	Trojan.Win32.Vigorf.A
CrowdStrike	win/malicious_confidence_80% (D)
K7GW	Adware ( 004e189e1 )
Cyren	W32/Trojan.SYVK-7846
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Adware.Bang5mai.A
APEX	Malicious
Avast	FileRepMalware
Sophos	Bang5mai (PUA)
McAfee-GW-Edition	BehavesLike.Win32.BadFile.hh
FireEye	Generic.mg.f6018e4851370ebd
Microsoft	Trojan:Win32/Wacatac.A!ml
McAfee	Artemis!F6018E485137
VBA32	BScope.Adware.AdLoad
Ikarus	PUA.Bang5mai
Fortinet	Riskware/Bang5mai
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Win32/Adware.Bang5mai.A?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/Adware.Bang5mai.A removal