Categories: Adware

Win32/Adware.Nieguide.AE information

The Win32/Adware.Nieguide.AE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Adware.Nieguide.AE virus can do?

Dynamic (imported) function loading detected
Performs HTTP requests potentially not found in PCAP.
HTTPS urls from behavior.
Unconventionial language used in binary resources: Korean
Authenticode signature is invalid
Attempts to modify proxy settings

How to determine Win32/Adware.Nieguide.AE?


File Info:
name: 41E28667070DB0F9D659.mlwpath: /opt/CAPEv2/storage/binaries/f4cd2a66cca4d1d9c69247df151d3ced0ed9f199454473278584bfdeeca79c7ecrc32: 38CAF2C1md5: 41e28667070db0f9d6596a0b38a40dd3sha1: 5c80965dcd61b5c9022ff94e5543f9ad56d90e99sha256: f4cd2a66cca4d1d9c69247df151d3ced0ed9f199454473278584bfdeeca79c7esha512: cc0aaf0637911f452d9818a017b2f7fa1217c36192d99d25fdc435bc3a7dc8692b980245f652b43e75e830cb7744d41c0caf3ef1a0c880c14a4766267a5d890essdeep: 1536:tpWAaQKqOqYYxkz2O/YYwWWYwYYYvZZZPZPZMZZZPZZzZZZZZkCit:tpWAXOqBxkz2O/YYwWWYwYYYFtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1F4240A9078164517E496C9334BAB29A5BB0DAF027F07EB7F824DBA5F7C71444EB02E18sha3_384: 41141e737013448db6bbf808b6ff72b10c7c0523d49d22626d5e722df67cc76fdf82538d4525ee466c37e126e29753edep_bytes: 558bec6aff6898a14000684a77400064timestamp: 2017-08-04 07:09:17
Version Info:
Comments: CompanyName: ebizFileDescription: ancamcorderupdateFileVersion: 1, 0, 0, 1InternalName: ancamcorderupdateLegalCopyright: Copyright ⓒ 2013LegalTrademarks: OriginalFilename: ancamcorderupdate.exePrivateBuild: ProductName: ebiz ancamcorderupdateProductVersion: 1, 0, 0, 1SpecialBuild: Translation: 0x0412 0x04b0

Win32/Adware.Nieguide.AE also known as:

Bkav	W32.AIDetect.malware2
Lionic	Riskware.Win32.Snojan.1!c
DrWeb	Trojan.DownLoader26.44307
MicroWorld-eScan	Adware.GenericKD.5813732
FireEye	Generic.mg.41e28667070db0f9
McAfee	Artemis!41E28667070D
Malwarebytes	Adware.KorAd
Sangfor	Adware.Win32.GenericKD.5813732
K7AntiVirus	Adware ( 00513bfc1 )
Alibaba	Downloader:Win32/Snojan.96caa579
K7GW	Adware ( 00513bfc1 )
Arcabit	Adware.Generic.D58B5E4
Cyren	W32/Nieguide.C.gen!Eldorado
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Adware.Nieguide.AE
TrendMicro-HouseCall	PUA_SNOJAN
Paloalto	generic.ml
Kaspersky	not-a-virus:Downloader.Win32.Snojan.byii
BitDefender	Adware.GenericKD.5813732
NANO-Antivirus	Trojan.Win32.Snojan.erselj
SUPERAntiSpyware	Adware.KorAd/Variant
Avast	Win32:Adware-gen [Adw]
Rising	Trojan.Generic@AI.83 (RDML:B9OvWE6mGl8WjD9wooRM/w)
Ad-Aware	Adware.GenericKD.5813732
Sophos	Generic ML PUA (PUA)
Zillya	Adware.Nieguide.Win32.200
TrendMicro	PUA_SNOJAN
Emsisoft	Adware.GenericKD.5813732 (B)
Ikarus	Win32.SuspectCrc
Jiangmin	Downloader.Snojan.sg
Webroot	W32.Adware.Gen
Avira	ADWARE/Adware.Gen
MAX	malware (ai score=100)
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	PWS:Win32/Zbot!ml
GData	Adware.GenericKD.5813732
Cynet	Malicious (score: 100)
VBA32	Downloader.Snojan
ALYac	Adware.GenericKD.5813732
APEX	Malicious
Tencent	Malware.Win32.Gencirc.11498d64
Yandex	PUA.Downloader!B+DwpS/NFPU
Fortinet	Riskware/Snojan
AVG	Win32:Adware-gen [Adw]
Cybereason	malicious.7070db
Panda	Trj/GdSda.A