Win32/Adware.Virtumonde.NCP malicious file

Malware Removal

The Win32/Adware.Virtumonde.NCP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Win32/Adware.Virtumonde.NCP virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz

How to determine Win32/Adware.Virtumonde.NCP?


File Info:

crc32: 3A7F702D
md5: 06a774f23d8ed66f2b811c1d463633b0
name: 06A774F23D8ED66F2B811C1D463633B0.mlw
sha1: 945b503234c432bb178753e5a8e1ed4b1ca7793d
sha256: dcf4721eeaee0ea31e0814b50f59079ad6802742da6d7d6d188b1cd2681d1ce7
sha512: 0d23e332100672912540fa1ddd7e3172fe3885c70ed066dcda98f1660fe980a84236d59c66010b0ec01145b2d3338c2bff550f6f715158b323ee947156553cbf
ssdeep: 48:q1UgQhI0nZ5n0kPm+U4wOhT/QhIbBwt5YESBvnsPkdZOXoj3XTrkbssss:KyekMkfwOhTYebq5MngkXOXoDX/
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/Adware.Virtumonde.NCP also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:Trojan.Heur.JP.dmW@ayiSM7l
SangforSuspicious.Win32.SpikeAex.PEVFSZL
CrowdStrikewin/malicious_confidence_80% (D)
Cybereasonmalicious.23d8ed
SymantecSMG.Heur!gen
ESET-NOD32a variant of Win32/Adware.Virtumonde.NCP
APEXMalicious
AvastWin32:Adware-gen [Adw]
BitDefenderGen:Trojan.Heur.JP.dmW@ayiSM7l
NANO-AntivirusRiskware.Win32.Virtumonde.exwikg
ViRobotTrojan.Win32.Tdss.20480.IZ
MicroWorld-eScanGen:Trojan.Heur.JP.dmW@ayiSM7l
TencentWin32.Trojan.Heur.Gbv
Ad-AwareGen:Trojan.Heur.JP.dmW@ayiSM7l
SophosGeneric PUA JE (PUA)
ComodoTrojWare.Win32.MalPack.PKB@1rava1
BitDefenderThetaAI:Packer.42E5277D1E
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.PWSZbot.qz
FireEyeGeneric.mg.06a774f23d8ed66f
EmsisoftGen:Trojan.Heur.JP.dmW@ayiSM7l (B)
SentinelOneStatic AI – Suspicious PE
AviraHEUR/AGEN.1132336
KingsoftWin32.Heur.KVM008.a.(kcloud)
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataGen:Trojan.Heur.JP.dmW@ayiSM7l
McAfeeArtemis!06A774F23D8E
MAXmalware (ai score=88)
PandaTrj/CI.A
FortinetRiskware/Virtumonde
AVGWin32:Adware-gen [Adw]
Paloaltogeneric.ml

How to remove Win32/Adware.Virtumonde.NCP?

Win32/Adware.Virtumonde.NCP removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment