Adware

Win32/Adware.DownloadWare.J (file analysis)

Malware Removal

The Win32/Adware.DownloadWare.J is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Adware.DownloadWare.J virus can do?

  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Win32/Adware.DownloadWare.J?


File Info:

name: 369C086402D54D0040F2.mlw
path: /opt/CAPEv2/storage/binaries/813ad06b16698292cef380e68c5905004b98202e38c40a39a02ba0b77e684e3d
crc32: 004133AB
md5: 369c086402d54d0040f22bf97b6a9873
sha1: 05aa3166494105b28aab05566958a0a6d27fdb8f
sha256: 813ad06b16698292cef380e68c5905004b98202e38c40a39a02ba0b77e684e3d
sha512: 65f4f03b6201b8ecafd26db8a469ff96fe22b79b56ce28f734ca3489567bce3fe5ab059ec918fe3e4ad0f0c6403d58e5c9720b2882d2d44892af190660d1c162
ssdeep: 6144:ohdbtBLBIRL0jejSbj160L+sDAf7AIVh5eCq34qRQgI/5RKZO4QDOrkwfetXeO9k:8BjejSbj1tL+sEzAGtq34Y+/PfSkwolC
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T163F47335E605F025E8D389743924A66B64282D762246AC2FF78EAB1673707D3B5F070F
sha3_384: 44284a1d4dcb87f0e1530fc4c51ba242d1980b754180c1d260277361578e54e636066974123af0bd946120ba1c5403a1
ep_bytes: 68307c4000e8f0ffffff000000000000
timestamp: 2013-01-17 01:55:12

Version Info:

0: [No Data]

Win32/Adware.DownloadWare.J also known as:

Elasticmalicious (moderate confidence)
FireEyeGeneric.mg.369c086402d54d00
CAT-QuickHealAdware.Hebogo.A3
CylanceUnsafe
Sangfor[MICROSOFT VISUAL BASIC 5.0]
CrowdStrikewin/grayware_confidence_60% (D)
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Adware.DownloadWare.J
APEXMalicious
ClamAVWin.Malware.Hebogo-9872088-0
Kasperskynot-a-virus:AdWare.Win32.VB.li
NANO-AntivirusRiskware.Win32.VB.edkaoe
ComodoApplication.Win32.Downware.KG@5179r4
DrWebTrojan.DownLoader8.4732
ZillyaAdware.DownloadWare.Win32.786
TrendMicroTROJ_GEN.R03BC0PDK22
McAfee-GW-EditionBehavesLike.Win32.Generic.bm
SentinelOneStatic AI – Malicious PE
JiangminAdware.VB.ak
AviraADWARE/DownloadWare.xrlre
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
McAfeePUP-XGJ-YP
TrendMicro-HouseCallTROJ_GEN.R03BC0PDK22
YandexPUA.Agent!bGm8xr4YMAw
IkarusAdWare.Win32.Hebogo
MaxSecureTrojan.Malware.300983.susgen
FortinetRiskware/DownloadWare
BitDefenderThetaGen:NN.ZevbaF.34606.VmW@aWZTg3e
Cybereasonmalicious.402d54

How to remove Win32/Adware.DownloadWare.J?

Win32/Adware.DownloadWare.J removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment