Win32/Adware.BHO.NIC information

The Win32/Adware.BHO.NIC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Adware.BHO.NIC virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Win32/Adware.BHO.NIC?


File Info:
name: CFEFF4D89EBB37B2FBD0.mlw
path: /opt/CAPEv2/storage/binaries/c231becb23570d6cfdd7a7532265e95377b3303a1cd5dfd47aa7ceb2445d2638
crc32: 683661B7
md5: cfeff4d89ebb37b2fbd046d274257b09
sha1: 545807dbf1907496d00842bdd96056e960dee6be
sha256: c231becb23570d6cfdd7a7532265e95377b3303a1cd5dfd47aa7ceb2445d2638
sha512: 1bcc5d60382d5db95135c2852c48457d20a71d8aee89ec9dffe943569a5435eab2365b5a8022f3cbb719991a97ba6d99f28c833783230f91c7e95f2ddd8d9cdb
ssdeep: 12288:ca0K3rCjoQIRA6t59v/kOwbLQIhDFQehTsJMWLAsu02u8Lx:GK3HQVW55/xwnrhDFQehT0TBj2d
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FDD48D01B293C130F16501B50E9E7AA766BABE534BF20ED7F2953E181BB17C198393E5
sha3_384: ff31596650cd9ca5adc074f574c85f2d220ceee2dace3c4e66bf3b1e3d51099448bb279f854b559653e62e9f391ad1b1
ep_bytes: 6a606810454500e8761d0000bf940000
timestamp: 2007-11-29 03:06:12

Version Info:
CompanyName: RealNetworks Inc.
FileDescription: Real游戏更新程序
FileVersion: 1.0.0.1
InternalName: RealDownload.exe
LegalCopyright: Copyright (C) RealNetworks.
OriginalFilename: RealDownload.exe
ProductName: Real游戏更新程序
ProductVersion: 1.0.0.1
Translation: 0x0804 0x03a8

Win32/Adware.BHO.NIC also known as:

Bkav	W32.Common.5BCFC2B2
Lionic	Adware.Win32.Generic.2!c
Skyhigh	BehavesLike.Win32.Infected.jh
Cylance	unsafe
Zillya	Adware.BHO.Win32.10036
Sangfor	Adware.Win32.BHO.Vywb
ESET-NOD32	a variant of Win32/Adware.BHO.NIC
NANO-Antivirus	Trojan.Win32.BHO.cyqazd
Avast	Win32:Adware-gen [Adw]
Google	Detected
Varist	W32/Agent.DO.gen!Eldorado
Kingsoft	malware.kb.a.771
Cynet	Malicious (score: 100)
McAfee	Artemis!CFEFF4D89EBB
Malwarebytes	Generic.Malware/Suspicious
Rising	Adware.BHO!8.31B (TFE:5:V0mv3cqm0yE)
Fortinet	Riskware/BHO
AVG	Win32:Adware-gen [Adw]
DeepInstinct	MALICIOUS

How to remove Win32/Adware.BHO.NIC?

Win32/Adware.BHO.NIC removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X